Description (CNA)
An improper Input Validation vulnerability in OTRS Customer Backend module allows to access customer information which are restricted to other groups. Please note that the feature has to be anabled and CustomerGroupSupport has to be used to be affected. This issue affects OTRS: * 7.0.X * 8.0.X * 2023.X * 2024.X * 2025.X * 2026.X before 2026.4.X
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OTRS AG / OTRS | affected 7.0.x; affected 8.0.x; affected 2023.x; affected 2024.x; affected 2025.x; affected 2026.x through 2026.3.x |
CWE
CWE-200
References
ADP enrichment
No English description supplied.
No references supplied.