CVE-2020-1778
CVE-2020-1778 · Bypassing user account validation
This page contains facts from public vulnerability sources. Check the original advisory before updating.
When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions.
CVSS 4.1 · Medium · EPSS 0.7%
- Published
- Updated
Stack: system
Affected products and versions
otrs
- Versions
- ≥ 8.0.x, ≤ 8.0.9: Affected (custom)
No fix published
otrs2 Ubuntu:16.04:LTS
- Versions
- 4.0.10-1
- 5.0.1-1
- 5.0.1-2
- 5.0.2-1
- 5.0.3-1
- 5.0.5-1
- 5.0.6-1
- 5.0.7-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
otrs2 Ubuntu:18.04:LTS
- Versions
- 5.0.23-1
- 5.0.24-1
- 6.0.1-1
- 6.0.2-1
- 6.0.3-1
- 6.0.4-1
- 6.0.5-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
otrs2 Ubuntu:20.04:LTS
- Versions
- 6.0.20-1
- 6.0.23-2
- 6.0.24-1
- 6.0.25-1
- 6.0.25-2
- 6.0.25-3
- 6.0.26-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
otrs2 Ubuntu:22.04:LTS
- Versions
- 6.0.32-6
- 6.1.2-1
- 6.2.1-1
- 6.2.2-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published