[Bug 1137614] VUL-1: CVE-2019-12497: otrs: personal information disclosed via external frontend [OSA-2019-09]