A central point of contact allows unique vulnerability identification for all OTRS solutions.
Cupertino, November 21, 2019 – OTRS AG is now the “CVE Numbering Authority” (CNA) for all OTRS products. This means that the OTRS Security Team is the central point of contact for all OTRS and ((OTRS)) Community Edition software. The team is able to directly assign a CVE number to the vulnerability found.
The aim of CVE numbering is to facilitate the exchange of information about vulnerabilities through precise numbering. Often, the same vulnerability may be given multiple names by different companies and institutions; giving a single vulnerability a unique number allows it to be clearly identified by all.
“We are pleased to meet Mitre’s requirements, which build on our proven vulnerability management processes. The training and the concluding test were practice-oriented and helped us to implement final fine-tuning of the processes,” reports Jens Bothe, Director Global Consulting and security expert at OTRS AG.
The OTRS Security Team can be reached at this email address: security@otrs.com.
The current OTRS Group Vulnerability Disclosure Policy can be found on the Github Repository: https://github.com/OTRS/otrs/blob/rel-6_0/SECURITY.md
About OTRS Group
OTRS Group is the manufacturer and the world’s largest provider of the service management suite OTRS, awarded with the SERVIEW CERTIFIED TOOL seal of approval. It offers flexible solutions for process and communication management to companies of all sizes, saving them time and money. Among its customers are Lufthansa, Airbus, IBM, Porsche, Siemens, BSI (Federal Office for Security in Information Technology), Max Planck Institute, Toyota, Hapag Lloyd and Banco do Brazil (Bank of Brazil). More than 170,000 companies worldwide use OTRS, including over 40 percent of the DAX 30 companies. OTRS is available in 40 languages. The company consists of OTRS AG and its six subsidiaries OTRS Inc. (USA), OTRS S.A. de C.V. (Mexico), OTRS Asia Pte. Ltd. (Singapore), OTRS Asia Ltd. (Hong Kong), OTRS do Brasil Soluções Ltda. (Brazil) and OTRS Magyarország Kft. (Hungary). OTRS AG is listed on the basic board of the Frankfurt Stock Exchange. For more information, see www.otrs.com.