CVE-2011-1433
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2011-1433
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The (1) AgentInterface and (2) CustomerInterface components in Open Ticket Request System (OTRS) before 3.0.6 place cleartext credentials into the session data in the database, which makes it easier for context-dependent attackers to obtain sensitive information by reading the _UserLogin and _UserPW fields.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
OTRS AgentInterface和ustomerInterface组件敏感信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OTRS（Open-source Ticket Request System）是德国OTRS集团的一套开源缺陷跟踪管理系统软件。该软件将电话，邮件等各种渠道提交进来的服务请求归类为不同的队列、服务级别，服务人员通过OTRS系统来跟踪和回复客户。 Open Ticket Request System（OTRS）3.0.6之前版本中的（1）AgentInterface和（2）ustomerInterface组件在数据库的会话数据中放置了明文证书。上下文攻击者更容易通过读_UserLogin和_UserPW字段
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2011-1433
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2011-1433
Please Login to view more intelligence information
- http://bugs.otrs.org/show_bug.cgi?id=6878x_refsource_CONFIRM
- http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2011-1433
Same Patch Batch · n/a · 2011-03-18 · 25 CVEs total
| CVE-2010-4758 | OTRS installer.pl密码泄露漏洞 | |
| CVE-2011-1148 | PHP 'substr_replace()'释放后重用远程内存破坏漏洞 | |
| CVE-2010-4768 | OTRS队列访问限制绕过漏洞 | |
| CVE-2010-4767 | OTRS拒绝服务漏洞 | |
| CVE-2010-4766 | OTRS AgentTicketForward功能潜在敏感图像信息泄露漏洞 | |
| CVE-2010-4765 | OTRS Kernel::System::Main::FileWrite方法竞争条件漏洞 | |
| CVE-2010-4764 | OTRS信任管理漏洞 | |
| CVE-2010-4763 | OTRS ACL-customer-status Ticket Type设置ACL限制绕过漏洞 | |
| CVE-2010-4762 | OTRS rich-text-editor组件跨站脚本攻击漏洞 | |
| CVE-2010-4761 | OTRS客户界面ticket-print对话框潜在敏感信息泄露漏洞 | |
| CVE-2010-4760 | OTRS敏感信息泄露漏洞 | |
| CVE-2010-4759 | OTRS拒绝服务漏洞 | |
| CVE-2008-7275 | OTRS多个跨站脚本攻击漏洞 | |
| CVE-2009-5057 | OTRS S/MIME功能邮件信息泄露漏洞 | |
| CVE-2009-5056 | OTRS输入验证漏洞 | |
| CVE-2009-5055 | OTRS访问限制绕过漏洞 | |
| CVE-2008-7283 | OTRS访问限制绕过和web界面更新漏洞 | |
| CVE-2008-7282 | OTRS CustomerNewTicketQueueSelectionGeneric.pm访问限制绕过漏洞 | |
| CVE-2008-7281 | OTRS敏感电子邮件地址信息泄露漏洞 | |
| CVE-2008-7280 | OTRS Kernel/System/EmailParser.pm拒绝服务漏洞 |
Showing top 20 of 25 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8196
JeecgBoot mLogin Endpoint LoginController.java authorization - CVE-2026-8195
JeecgBoot SVG File CommonController.java cross site scriptin - CVE-2026-8194
osTicket Dispatcher class.dispatcher.php cross-site request - CVE-2026-8193
Akaunting Invoice PDF Rendering dompdf.php server-side reque - CVE-2026-8186
Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out-
V. Comments for CVE-2011-1433
No comments yet