Unscored severity · published Mar 18, 2011
CVE-2010-4761
The customer-interface ticket-print dialog in Open Ticket Request System (OTRS) before 3.0.0-beta3 does not properly restrict customer-visible data, which allows remote…
–
CVSS
1.3%
EPSS
No
On KEV
Description
The customer-interface ticket-print dialog in Open Ticket Request System (OTRS) before 3.0.0-beta3 does not properly restrict customer-visible data, which allows remote authenticated users to obtain potentially sensitive information from the (1) responsible, (2) owner, (3) accounted time, (4) pending until, and (5) lock fields by reading this dialog.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OT
Otrs · Otrs
through 3.0.0; 0.5; 0.5; 0.5; 0.5; 0.5; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-4761
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-4761
Patch
http://bugs.otrs.org/show_bug.cgi?id=5875
source.otrs.org
http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
More from Otrs
9.8
CVE-2024-23790
Missing file type check in avatar picture upload
9.8
CVE-2022-4427
SQL Injection via OTRS Search API
9.1
CVE-2026-48188
SQL Injection via MySQL Quote Method
9.1
CVE-2023-5422
SSL Certificates are not checked for E-Mail Handling
8.8
CVE-2023-38060
Host header injection by attachments in web service