VULNERABILITY INTELLIGENCE

CVE-2023-6254

CVSS score8.1 HIGH
EPSS probability0.65%
CISA KEVNot currently listed
Published2023-11-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Description

A Vulnerability in OTRS AgentInterface and ExternalInterface allows the reading of plain text passwords which are send back to the client in the server response- This issue affects OTRS: from 8.0.X through 8.0.37.

Weakness classification

  • security@otrs.com: CWE-522
  • nvd@nist.gov: CWE-522

Primary references