CVE-2022-32741
Publication date 13 June 2022
Last updated 24 July 2024
Ubuntu priority
Attacker is able to determine if the provided username exists (and it's valid) using Request New Password feature, based on the response time.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| otrs2 | 22.04 LTS jammy |
Needs evaluation
|
| 20.04 LTS focal |
Needs evaluation
|
|
| 18.04 LTS bionic |
Needs evaluation
|
|
| 16.04 LTS xenial |
Needs evaluation
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score |
5.3 · Medium
|
| Attack vector | Network |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | Low |
| Integrity impact | None |
| Availability impact | None |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |