CVE-2022-32739
CVE-2022-32739 · OTRS version number is always in the exported ICS files
This page contains facts from public vulnerability sources. Check the original advisory before updating.
When Secure::DisableBanner system configuration has been disabled and agent shares his calendar via public URL, received ICS file contains OTRS release number.
CVSS 3.5 · Low · EPSS 0.9%
- Published
- Updated
Stack: system
Affected products and versions
otrs
- Versions
- ≥ 7.0.x, ≤ 7.0.34: Affected (custom)
- ≥ 8.0.x, ≤ 8.0.22: Affected (custom)
No fix published
otrscalendarresourceplanning
- Versions
- ≥ 7.0.x, ≤ 7.0.30: Affected (custom)
- ≥ 8.0.x, ≤ 8.0.20: Affected (custom)
No fix published
otrs2 Ubuntu:16.04:LTS
- Versions
- 4.0.10-1
- 5.0.1-1
- 5.0.1-2
- 5.0.2-1
- 5.0.3-1
- 5.0.5-1
- 5.0.6-1
- 5.0.7-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
otrs2 Ubuntu:18.04:LTS
- Versions
- 5.0.23-1
- 5.0.24-1
- 6.0.1-1
- 6.0.2-1
- 6.0.3-1
- 6.0.4-1
- 6.0.5-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
otrs2 Ubuntu:20.04:LTS
- Versions
- 6.0.20-1
- 6.0.23-2
- 6.0.24-1
- 6.0.25-1
- 6.0.25-2
- 6.0.25-3
- 6.0.26-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
otrs2 Ubuntu:22.04:LTS
- Versions
- 6.0.32-6
- 6.1.2-1
- 6.2.1-1
- 6.2.2-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published