ZSA-2020-06

Problem

Files put into the support bundle can disclose sensitive information.

Solution

Upgrade to the latest available OTRS patch level (https://ftp.otrs.org/pub/otrs/).

Workaround

As a workaround, you can replace the affected files (see below for download).

ATTENTION: Please check if any of these files have been changed in your OTRS installation by additional add-ons. In that case you MUST NOT simply overwrite the files with the ones provided below. Please contact us instead.

Download

• Security patch for OTRS 6
• Security patch for OTRS 5

References

• Vendor advisory
• CVE-2020-1770