CVE-2020-1770
published 2020-03-27CVE-2020-1770: Support bundle generated files could contain sensitive information that might be unwanted to be disclosed. This issue affects: ((OTRS)) Community Edition…
PriorityP420medium4.3CVSS 3.1
AVNACLPRLUINSUCLINAN
EPSS
1.32%
67.6th percentile
Support bundle generated files could contain sensitive information that might be unwanted to be disclosed. This issue affects: ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | otrs2 | < otrs2 6.0.27-1 (bullseye) | otrs2 6.0.27-1 (bullseye) |
| opensuse | backports_sle | — | — |
| opensuse | leap | — | — |
| opensuse | leap | — | — |
| otrs | otrs | 5.0.0 – 5.0.41 | — |
| otrs | otrs | 6.0.0 – 6.0.26 | — |
| otrs | otrs | 7.0.0 – 7.0.15 | — |
| otrs_ag | community_edition | 5.0.x – 5.0.41 | — |
| otrs_ag | community_edition | 6.0.x – 6.0.26 | — |
| otrs_ag | otrs | 7.0.x – 7.0.15 | — |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
osv4.3MEDIUM
vendor_debian2.4LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-x622-hm6c-fm4f: Support bundle generated files could contain sensitive information that might be unwanted to be disclosed
ghsa_unreviewed·2022-05-24
CVE-2020-1770 [MEDIUM] CWE-200 GHSA-x622-hm6c-fm4f: Support bundle generated files could contain sensitive information that might be unwanted to be disclosed
Support bundle generated files could contain sensitive information that might be unwanted to be disclosed. This issue affects: ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.
OSV
CVE-2020-1770: Support bundle generated files could contain sensitive information that might be unwanted to be disclosed
osv·2020-03-27·CVSS 4.3
CVE-2020-1770 [MEDIUM] CVE-2020-1770: Support bundle generated files could contain sensitive information that might be unwanted to be disclosed
Support bundle generated files could contain sensitive information that might be unwanted to be disclosed. This issue affects: ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.
Debian
CVE-2020-1770: otrs2 - Support bundle generated files could contain sensitive information that might be...
vendor_debian·2020·CVSS 2.4
CVE-2020-1770 [LOW] CVE-2020-1770: otrs2 - Support bundle generated files could contain sensitive information that might be...
Support bundle generated files could contain sensitive information that might be unwanted to be disclosed. This issue affects: ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.
Scope: local
bullseye: resolved (fixed in 6.0.27-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.htmlhttps://lists.debian.org/debian-lts-announce/2020/05/msg00000.htmlhttps://lists.debian.org/debian-lts-announce/2023/08/msg00040.htmlhttps://otrs.com/release-notes/otrs-security-advisory-2020-07/http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.htmlhttps://lists.debian.org/debian-lts-announce/2020/05/msg00000.htmlhttps://lists.debian.org/debian-lts-announce/2023/08/msg00040.htmlhttps://otrs.com/release-notes/otrs-security-advisory-2020-07/
2020-03-27
Published