[Bug 1141430] VUL-1: CVE-2019-12746: otrs: unknowingly session ID disclosure by link sharing