ZSA-2019-07
Disclosure of personal agent information in customer frontend.
Problem
Personal information of an agent (like name and email address) can be disclosed in external notes in customer frontend.
Solution
Upgrade to the latest available OTRS patch level (https://ftp.otrs.org/pub/otrs/).
Workaround
As a workaround, you can replace the affected files (see below for download). After that, check the following new SysConfig options:
Ticket::Frontend::CustomerTicketZoom###DisplayNoteFrom
Ticket::Frontend::CustomerTicketZoom###DefaultAgentName
ATTENTION: Please check if any of these files have been changed in your OTRS installation by additional add-ons. In that case you MUST NOT simply overwrite the files with the ones provided below. Please contact us instead.