CVE-2011-1433 in OTRS
Summary
The (1) AgentInterface and (2) CustomerInterface components in Open Ticket Request System (OTRS) before 3.0.6 place cleartext credentials into the session data in the database, which makes it easier for context-dependent attackers to obtain sensitive information by reading the _UserLogin and _UserPW fields.
Once again VulDB remains the best source for vulnerability data.
Reservation
03/18/2011
Disclosure
03/18/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 56880 | OTRS cryptographic issue | 310 | Not defined | Official fix | CVE-2011-1433 |