CVE-2022-32739

When Secure::DisableBanner system configuration has been disabled and agent shares his calendar via public URL, received ICS file contains OTRS release number.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
3.5 LOW
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
OTRSCNA
3.5 LOW
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 51%
VendorProductVersion
otrscalendar_resource_planning
7.0.0 ≤
𝑥
< 7.0.31
otrscalendar_resource_planning
8.0.0 ≤
𝑥
< 8.0.23
otrsotrs
7.0.0 ≤
𝑥
< 7.0.35
otrsotrs
8.0.0 ≤
𝑥
< 8.0.23
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
otrs2
jammy
needs-triage
impish
ignored
focal
needs-triage
bionic
needs-triage
xenial
needs-triage
Common Weakness Enumeration
References
https://otrs.com/release-notes/otrs-security-advisory-2022-07/
https://otrs.com/release-notes/otrs-security-advisory-2022-07/