CVE-2024-23791 — Unnecessary data is written to log if issues during indexing occurs

CVE-2024-23791

Unnecessary data is written to log if issues during indexing occurs PUBLISHED

Description (CNA)

Insertion of debug information into log file during building the elastic search index allows reading of sensitive information from articles.This issue affects OTRS: from 7.0.X through 7.0.48, from 8.0.X through 8.0.37, from 2023.X through 2023.1.1.

Affected (CNA)

Vendor / product	Versions
OTRS AG / OTRS	affected 7.0.x through 7.0.48; affected 8.0.x through 8.0.37; affected 2023.x through 2023.1.1

CWE

CWE-532

References

https://otrs.com/release-notes/otrs-security-advisory-2024-02/

ADP enrichment

CVE

No English description supplied.

https://otrs.com/release-notes/otrs-security-advisory-2024-02/

CISA-ADP

No English description supplied.

No references supplied.