CVE-2024-23791

NameCVE-2024-23791
DescriptionInsertion of debug information into log file during building the elastic search index allows reading of sensitive information from articles.This issue affects OTRS: from 7.0.X through 7.0.48, from 8.0.X through 8.0.37, from 2023.X through 2023.1.1.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Notes

NOT-FOR-US: OTRS
Issue is listed as specific to >= 7.x, so won't affect Znuny which forked from 6.x

Search for package or bug name: Reporting problems