CVE-2023-6254 — Password is send back to client

CVE-2023-6254

Password is send back to client PUBLISHED

Description (CNA)

A Vulnerability in OTRS AgentInterface and ExternalInterface allows the reading of plain text passwords which are send back to the client in the server response- This issue affects OTRS: from 8.0.X through 8.0.37.

Affected (CNA)

Vendor / product	Versions
OTRS AG / OTRS	affected 8.0.x through 8.0.37

CWE

CWE-522

References

https://otrs.com/release-notes/otrs-security-advisory-2023-11/

ADP enrichment

CVE

No English description supplied.

https://otrs.com/release-notes/otrs-security-advisory-2023-11/

CISA-ADP

No English description supplied.

No references supplied.