CVE-2017-15864
Fixed in a distro release EPSS 2%
In the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password.
Products: otrs, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | otrs2 | 4.0.7-2 |
| Debian 7 | otrs2 | 3.3.18-1~deb7u2 |