CVE-2020-1778

Опубликовано: 23 нояб. 2020

Источник: nvd

CVSS3: 4.1

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions.

Ссылки

https://otrs.com/release-notes/otrs-security-advisory-2020-16/
Release Notes
Vendor Advisory
https://otrs.com/release-notes/otrs-security-advisory-2020-16/
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*

Версия до 8.0.9 (включая)

EPSS

Процентиль: 46%

0.00233

Низкий

4.1 Medium

CVSS3

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVE-2020-1778

CVSS3: 4.1

ubuntu

около 5 лет назад

When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions.

CVE-2020-1778

CVSS3: 4.1

debian

около 5 лет назад

When OTRS uses multiple backends for user authentication (with LDAP), ...

GHSA-vwfv-p8p3-m4r7

github

больше 3 лет назад

When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions.

EPSS

Процентиль: 46%

0.00233

Низкий

4.1 Medium

CVSS3

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-287