Vulnetix
Try Vulnetix Request Demo
CVE-2020-1774 PUBLISHED

When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys. Therefore it's possible to mix them and to send private key to the third-party instead of public key. This issue affects ((OTRS)) Community Edition: 5.0.42 and prior versions, 6.0.27 and prior versions. OTRS: 7.0.16 and prior versions.

EPSS 0.20% · 42.3th percentile

Risk Scores

EPSS Score
0.20%
42.3th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSotrs26.0.23-2, 6.0.25-2, 6.0.26-1
Ubuntu:16.04:LTSotrs25.0.1-2, 0, 5.0.1-1
Ubuntu:18.04:LTSotrs26.0.3-1, 6.0.5-1, 6.0.4-1

Timeline

References

Open in Interactive Console →