CVE-2020-1779

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

When dynamic templates are used (OTRSTicketForms), admin can use OTRS tags which are not masked properly and can reveal sensitive information. This issue affects: OTRS AG OTRSTicketForms 6.0.x version 6.0.40 and prior versions; 7.0.x version 7.0.29 and prior versions; 8.0.x version 8.0.3 and prior versions.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
OTRS AG	OTRSTicketForms	>= 6.0.x, <= 6.0.40; >= 7.0.x, <= 7.0.29; >= 8.0.x, <= 8.0.3

References

https://otrs.com/release-notes/otrs-security-advisory-2020-17/Broken Link
https://otrs.com/release-notes/otrs-security-advisory-2020-17/Broken Link

Timeline

Published: Feb 8, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-17855.5Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of c CVE-2020-17864.6HUAWEI Mate 20 Pro smartphones versions earlier than 10.0.0.175(C00E69R3P8) have an improper authentication vulnerability. The software does CVE-2020-17876.6HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139(C00E133R3P1) have an improper authentication vulnerability. The system has a logi CVE-2020-17885.5Honor V30 smartphones with versions earlier than 10.0.1.135(C00E130R4P1) have an improper authentication vulnerability. Certain applications CVE-2020-17896.8Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X products with version 1.0.1.21(SP3) have an insufficient authentication vulnerability.CVE-2020-178916.1TP-Link Archer C1200 firmware version 1.13 Build 2018/01/24 rel.52299 EU has a XSS vulnerability allowing a remote attacker to execute arbit CVE-2020-17908.8GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input fro CVE-2020-179016.5Cross-site request forgery (CSRF) in PbootCMS 1.3.2 allows attackers to change the password of a user.CVE-2020-17912.4HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerability. The system has a CVE-2020-17925.5Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156(C00E156R2P4) and versions earlier than BKL-L09 10.0.0.146(C432E4R1P4) h CVE-2020-17934.6There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certai CVE-2020-17944.6There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certai