CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Information Exposure
Summary: open ticket request system (otrs) 4.0.x before 4.0.28, 5.0.x before 5.0.26, and 6.0.x before 6.0.3, when cookie support is disabled, might allow remote attackers to hijack web sessions and consequently gain privileges via a crafted email.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2017-12-20
Last Modified Date: 2019-10-03
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Information Exposure.
user
CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Information Exposure
Summary: open ticket request system (otrs) 4.0.x before 4.0.28, 5.0.x before 5.0.26, and 6.0.x before 6.0.3, when cookie support is disabled, might allow remote attackers to hijack web sessions and consequently gain privileges via a crafted email.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2017-12-20
Last Modified Date: 2019-10-03
assistant