CVE-2010-4758

Severity: low (CVSS 1.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2011-03-18 · updated 2026-06-16
Weakness: CWE-310

Description

installer.pl in Open Ticket Request System (OTRS) before 3.0.3 has an Inbound Mail Password field that uses the text type, instead of the password type, for its INPUT element, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen.

Affected products

OTRS AG OTRS: through 3.0.2; 0.5-beta1, 0.5-beta2, 0.5-beta3, 0.5-beta4, 0.5-beta5, 0.5-beta6 (+100)

References

http://bugs.otrs.org/show_bug.cgi?id=6302
http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
http://bugs.otrs.org/show_bug.cgi?id=6302
http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807

Get alerted when CVE-2010-4758 or the next vulnerability affects your stack