Security Advisories

Dear reader,

The following security fix/es was/were made:

OTRS Security Advisory 2022-09

ID: OSA-2022-09
Date: 2022-06-13
Title: Information disclosure in Request New Password feature
Severity: 5.3. MEDIUM
Product: OTRS 8.0.x, OTRS 7.0.x
Fixed in: OTRS 8.0.23, OTRS 7.0.35,
FULL CVSS v3.1 VECTOR: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References: CVE-2022-32741

OTRS Security Advisory 2022-08

ID: OSA-2022-08
Date: 2022-06-13
Title: Information disclosure in the External Interface
Severity: 3.5 LOW
Product: OTRS 8.0.x, OTRS 7.0.x
Fixed in: OTRS 8.0.23, OTRS 7.0.35,
FULL CVSS v3.1 VECTOR: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
References: CVE-2022-32740

OTRS Security Advisory 2022-07

ID: OSA-2022-07
Date: 2022-06-13
Title: OTRS version number is always in the exported ICS files
Severity: 3.5. LOW
Product: OTRS 8.0.x, OTRS 7.0.x, OTRSCalendarResourcePlanning 8.0.x, OTRSCalendarResourcePlanning 7.0.x.
Fixed in: OTRS 8.0.23, OTRS 7.0.35, OTRSCalendarResourcePlanning 8.0.21, OTRSCalendarResourcePlanning 7.0.?.
FULL CVSS v3.1 VECTOR: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
References: CVE-2022-32739

To read the entire Security Advisory/Advisories, please follow this link:
https://otrs.com/overview-release-notes-security-advisories/security-advisories/

Kind regards,
Your OTRS release team

Subscribe to the OTRS Newsletter.

Read about OTRS service management solutions, product features, and interesting tips from our experts every month. Simply select your desired language.

Visit www.otrs.com or contact us.

OTRS AG

Zimmersmühlenweg 11
61440 Oberursel
Germany
+49 6172 681988 0