Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2022-32739

OTRS version number is always in the exported ICS files

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OTRS

Description

When Secure::DisableBanner system configuration has been disabled and agent shares his calendar via public URL, received ICS file contains OTRS release number.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OTRS AG OTRS

  • 7.0.x to ≤ 7.0.34affected
  • 8.0.x to ≤ 8.0.22affected

OTRS AG OTRSCalendarResourcePlanning

  • 7.0.x to ≤ 7.0.30affected
  • 8.0.x to ≤ 8.0.20affected

References