CVE-2020-1770

Publication date 27 March 2020

Last updated 26 August 2025


Ubuntu priority

Cvss 3 Severity Score

2.4 · Low

Score breakdown

Description

Support bundle generated files could contain sensitive information that might be unwanted to be disclosed. This issue affects: ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.

Status

Package Ubuntu Release Status
otrs2 26.04 LTS resolute Not in release
25.10 questing Not in release
25.04 plucky Not in release
24.10 oracular Not in release
24.04 LTS noble Not in release
23.10 mantic Not in release
23.04 lunar Not in release
22.10 kinetic Not in release
22.04 LTS jammy
Not affected
21.10 impish
Not affected
21.04 hirsute
Not affected
20.10 groovy
Not affected
20.04 LTS focal Ignored end of standard support, was needs-triage
19.10 eoan Ignored end of life
18.04 LTS bionic Ignored end of standard support, was needs-triage
16.04 LTS xenial Ignored end of standard support, was needs-triage
14.04 LTS trusty Not in release

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
otrs2

Severity score breakdown

Parameter Value
Base score 2.4 · Low
Attack vector Network
Attack complexity Low
Privileges required High
User interaction Required
Scope Unchanged
Confidentiality Low
Integrity impact None
Availability impact None
Vector CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N

Access our resources on patching vulnerabilities