CVE-2020-1778

Опубликовано: 23 нояб. 2020

Источник: debian

Описание

When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
otrs2	not-affected			package

Примечания

https://otrs.com/release-notes/otrs-security-advisory-2020-16/

Связанные уязвимости

CVE-2020-1778

CVSS3: 4.1

ubuntu

около 5 лет назад

When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions.

CVE-2020-1778

CVSS3: 4.1

nvd

около 5 лет назад

When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions.

GHSA-vwfv-p8p3-m4r7

github

больше 3 лет назад

When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions.