p PatchFirst

CVE-2022-3501

CVE-2022-3501 · Information exposure of template content due to missing check of permissions

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Article template contents with sensitive data could be accessed from agents without permissions.

CVSS 3.5 · Low · EPSS 0.5%

Published
Updated

Stack: system

Affected products and versions

  • otrs

    Versions
    • ≥ 8.0.x, ≤ 8.0.25: Affected (custom)

    No fix published

  • znuny Ubuntu:24.04:LTS

    Versions
    • 6.5.3-1
    • 6.5.4-1
    • 6.5.5-1
    • 6.5.6-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • znuny Ubuntu:25.10

    Versions
    • 6.5.14-1
    • 6.5.15-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • znuny Ubuntu:26.10

    Versions
    • 6.5.18-1
    • 6.5.20-1
    • 6.5.21-1
    • 6.5.22-1
    • 6.5.23-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • znuny Ubuntu:26.04:LTS

    Versions
    • 6.5.15-2
    • 6.5.18-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →