CVE-2025-24389

SMTP Password will be shown in cleartext on some SMTP errors

CVSS 6.3 MEDIUMEPSS 0.1%CWE-532

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6.3EPSS 0.1%KEV nãoPoC —Patch —

Ciclo de vida

27 jan 2025Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Certain errors of the upstream libraries will insert sensitive information in the OTRS or ((OTRS)) Community Edition log mechanism and mails send to the system administrator. This issue affects: * OTRS 7.0.X * OTRS 8.0.X * OTRS 2023.X * OTRS 2024.X * ((OTRS)) Community Edition: 6.0.x Products based on the ((OTRS)) Community Edition also very likely to be affected

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Produtos afetados

OTRS AG · OTRS OTRS AG · ((OTRS)) Community Edition

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://otrs.com/release-notes/otrs-security-advisory-2025-03/