5.2 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
31.3%
Attacker is able to determine if the provided username exists (and it’s valid) using Request New Password feature, based on the response time.
otrs.com/release-notes/otrs-security-advisory-2022-09/