Skip to content
CVE PROGRAM SOURCE RECORD4.1 Medium

CVE-2020-1778

Bypassing user account validation

Description

When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OTRS AG OTRS

  • 8.0.x to ≤ 8.0.9affected

References