CVE-2020-1770

MEDIUM 4.3CVE-2020-1770 · Published 27/03/2020 · updated 17/06/2026

In short

CVE-2020-1770 is a MEDIUM (CVSS 4.3) vulnerability affecting backports sle (opensuse), otrs (otrs).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 69.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
backports sle opensuse	`= 15.0`	No fix yet
otrs otrs	`≥ 5.0.0, ≤ 5.0.41≥ 6.0.0, ≤ 6.0.26≥ 7.0.0, ≤ 7.0.15`	No fix yet

Description

Support bundle generated files could contain sensitive information that might be unwanted to be disclosed. This issue affects: ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.

References

lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html · Mailing List
lists.debian.org/debian-lts-announce/2020/05/msg00000.html · Mailing List
lists.debian.org/debian-lts-announce/2023/08/msg00040.html
otrs.com/release-notes/otrs-security-advisory-2020-07 · Vendor Advisory

More vulnerabilities in backports sle

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

backports sle

opensuse

= 15.0

No fix yet

otrs

≥ 5.0.0, ≤ 5.0.41≥ 6.0.0, ≤ 6.0.26≥ 7.0.0, ≤ 7.0.15

No fix yet

More vulnerabilities in backports sle

See all →