CVE-2008-7281

CVE-2008-7281 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:N/A:N

Open Ticket Request System (OTRS) before 2.2.7 sends e-mail containing a Bcc header field that lists the Blind Carbon Copy recipients, which allows remote attackers to obtain potentially sensitive e-mail address information by reading this field.

Learn more about our Web Application Penetration Testing UK.