CVE catalog

CVE-2011-1433

DEBIAN-CVE-2011-1433

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.47% · Oct 25, 2026

The (1) AgentInterface and (2) CustomerInterface components in Open Ticket Request System (OTRS) before 3.0.6 place cleartext credentials into the session data in the database, which makes it easier for context-dependent attackers to obtain sensitive information by reading the _UserLogin and _UserPW fields.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianotrs2112.0.4p01-10vulnerable
Debianotrs2112.0.4p01-11vulnerable
Debianotrs2112.0.4p01-12vulnerable
Debianotrs2112.0.4p01-13vulnerable
Debianotrs2112.0.4p01-14vulnerable
Debianotrs2112.0.4p01-14.1vulnerable
Debianotrs2112.0.4p01-15vulnerable
Debianotrs2112.0.4p01-16vulnerable
Debianotrs2112.0.4p01-17vulnerable
Debianotrs2112.0.4p01-18vulnerable
Debianotrs2112.0.4p01-6vulnerable
Debianotrs2112.0.4p01-7vulnerable
Debianotrs2112.0.4p01-8vulnerable
Debianotrs2112.0.4p01-9vulnerable
Debianotrs2112.0.99beta1-1vulnerable
Debianotrs2112.0.99beta1-2vulnerable
Debianotrs2112.1.1-1vulnerable
Debianotrs2112.1.3-1vulnerable
Debianotrs2112.1.4-1vulnerable
Debianotrs2112.1.4-2vulnerable
Debianotrs2112.1.5-1vulnerable
Debianotrs2112.1.5-2vulnerable
Debianotrs2112.1.5-3vulnerable
Debianotrs2112.1.6-1vulnerable
Debianotrs2112.1.7-1vulnerable
Debianotrs2112.1.7-2vulnerable
Debianotrs2112.2.0~beta2-1vulnerable
Debianotrs2112.2.0~beta3-1vulnerable
Debianotrs2112.2.1-1vulnerable
Debianotrs2112.2.2-1vulnerable
Debianotrs2112.2.3-1vulnerable
Debianotrs2112.2.4-1vulnerable
Debianotrs2112.2.5-1vulnerable
Debianotrs2112.2.5-2vulnerable
Debianotrs2112.2.6-1vulnerable
Debianotrs2112.2.7-1vulnerable
Debianotrs2112.2.7-2vulnerable
Debianotrs2112.2.7-2lenny1vulnerable
Debianotrs2112.2.7-2lenny2vulnerable
Debianotrs2112.2.7-2lenny3vulnerable
Debianotrs2112.2.7-3vulnerable
Debianotrs2112.3.2-1vulnerable
Debianotrs2112.3.2-2vulnerable
Debianotrs2112.3.3-1vulnerable
Debianotrs2112.3.4-1vulnerable
Debianotrs2112.3.4-2vulnerable
Debianotrs2112.3.4-3vulnerable
Debianotrs2112.3.4-4vulnerable
Debianotrs2112.3.4-5vulnerable
Debianotrs2112.3.4-6vulnerable
Debianotrs2112.3.4-7vulnerable
Debianotrs2112.4.10+dfsg1-1vulnerable
Debianotrs2112.4.10+dfsg1-2vulnerable
Debianotrs2112.4.10+dfsg1-3vulnerable
Debianotrs2112.4.5-1vulnerable
Debianotrs2112.4.5-2vulnerable
Debianotrs2112.4.5-3vulnerable
Debianotrs2112.4.5-4vulnerable
Debianotrs2112.4.5-5vulnerable
Debianotrs2112.4.6-1vulnerable
Debianotrs2112.4.6-2vulnerable
Debianotrs2112.4.7+dfsg1-1vulnerable
Debianotrs2112.4.7-1vulnerable
Debianotrs2112.4.7-2vulnerable
Debianotrs2112.4.7-3vulnerable
Debianotrs2112.4.7-4vulnerable
Debianotrs2112.4.7-5vulnerable
Debianotrs2112.4.7-6vulnerable
Debianotrs2112.4.8+dfsg1-1vulnerable
Debianotrs2112.4.9+dfsg1-1vulnerable
Debianotrs2112.4.9+dfsg1-2vulnerable
Debianotrs2112.4.9+dfsg1-3vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze1vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze3vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze4vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze5vulnerable
Debianotrs2112.4.9+dfsg1-4vulnerable
Debianotrs2112.4.9+dfsg1-5vulnerable
Debianotrs2113.0.8+dfsg1-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianotrs2deb113.0.8+dfsg1-1Not reportedDEBIAN-CVE-2011-1433Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database]