CVE-2020-1778
Bypassing user account validation
- State
- Published
- Severity
- 4.1 Medium
- Published
- Nov 23, 2020
- Updated
- Sep 16, 2024
- Reserved
- Nov 29, 2019
Description
When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.1 Medium | CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N | OTRS |
Weaknesses
- CWE-287 Improper Authentication
Affected Products
| Product | Versions |
|---|---|
OTRSOTRS AG |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.