Debian/otrs2: medium 4.9
When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys. Therefore it's possible to mix them and to send private key to the third-party instead of
Action: Upgrade otrs2 to 6.0.28-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0.28-1 | - |
Fixed versions
| 6.0.28-1 |
Sources
published · modified · JSON