CVE-2022-32741
No fix known EPSS <1%CVSS 5.3
Attacker is able to determine if the provided username exists (and it's valid) using Request New Password feature, based on the response time.
Products: OTRS AG OTRS
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 16.04 LTS | otrs2 | no fix |
| Ubuntu 18.04 LTS | otrs2 | no fix |
| Ubuntu 20.04 LTS | otrs2 | no fix |
| Ubuntu 22.04 LTS | otrs2 | no fix |