Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vcrm-8v3j-v6f3

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

When an agent user is renamed or set to invalid the session belonging to the user is keept active. The session can not be used to access ticket data in the case the agent is invalid.

This issue affects ((OTRS)) Community Edition: 6.0.28 and prior versions.

OTRS: 7.0.18 and prior versions, 8.0.4. and prior versions.

When an agent user is renamed or set to invalid the session belonging to the user is keept active. The session can not be used to access ticket data in the case the agent is invalid.

This issue affects ((OTRS)) Community Edition: 6.0.28 and prior versions.

OTRS: 7.0.18 and prior versions, 8.0.4. and prior versions.

EPSS

Процентиль: 43%
0.00208
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-613

Связанные уязвимости

CVSS3: 3.5
ubuntu
больше 5 лет назад

When an agent user is renamed or set to invalid the session belonging to the user is keept active. The session can not be used to access ticket data in the case the agent is invalid. This issue affects ((OTRS)) Community Edition: 6.0.28 and prior versions. OTRS: 7.0.18 and prior versions, 8.0.4. and prior versions.

CVSS3: 3.5
nvd
больше 5 лет назад

When an agent user is renamed or set to invalid the session belonging to the user is keept active. The session can not be used to access ticket data in the case the agent is invalid. This issue affects ((OTRS)) Community Edition: 6.0.28 and prior versions. OTRS: 7.0.18 and prior versions, 8.0.4. and prior versions.

CVSS3: 3.5
debian
больше 5 лет назад

When an agent user is renamed or set to invalid the session belonging ...

EPSS

Процентиль: 43%
0.00208
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-613