Skip to content
OpenAdvisories
High · 8.1 CVE-2023-6254 EUVD-2023-58499GHSA-8vrv-grfv-cpq4

Password is send back to client

Published Nov 27, 2023 · Updated Oct 15, 2024 · Assigned by OTRS

Description

A Vulnerability in OTRS AgentInterface and ExternalInterface allows the reading of plain text passwords which are send back to the client in the server response-
This issue affects OTRS: from 8.0.X through 8.0.37.

Affected products

VendorProductAffectedFixed
OTRS OTRS 8.0.x – ≤ 8.0.37 —

Advisories 1

References