Lucene search
PRIOn knowledge basePRION:CVE-2020-1773HistoryMar 27, 2020 - 1:15 p.m.
Design/Logic Flaw
2020-03-2713:15:00
PRIOn knowledge base
www.prio-n.com
6
An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, password reset tokens and automatically generated passwords. This issue affects ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS; 7.0.15 and prior versions.
References
lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html
lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html
lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html
lists.debian.org/debian-lts-announce/2023/08/msg00040.html
otrs.com/release-notes/otrs-security-advisory-2020-10/
Related
nvd
nvd
CVE-2020-1773
2020-03-27 13:15:15
ubuntucve
ubuntucve
CVE-2020-1773
2020-03-27 00:00:00
osv
osv
CVE-2020-1773
2020-03-27 13:15:15
otrs2 - security update
2023-08-31 00:00:00
cve
cve
CVE-2020-1773
2020-03-27 13:15:15
debiancve
debiancve
CVE-2020-1773
2020-03-27 13:15:15
cvelist
cvelist
CVE-2020-1773 Session / Password / Password token leak
2020-03-27 00:00:00
openvas
openvas
OTRS 5.0.x < 5.0.42, 6.0.x < 6.0.27, 7.0.x < 7.0.16 Multiple Vulnerabilities
2020-03-30 00:00:00
openSUSE: Security Advisory for Recommended (openSUSE-SU-2020:0551-1)
2020-04-26 00:00:00
openSUSE: Security Advisory for Recommended (openSUSE-SU-2020:1475-1)
2020-09-21 00:00:00
suse
suse
Recommended update for otrs (moderate)
2020-09-23 00:00:00
Recommended update for otrs (moderate)
2020-09-20 00:00:00
Recommended update for otrs (moderate)
2020-04-25 00:00:00
nessus
nessus
openSUSE Security Update : otrs (openSUSE-2020-551)
2020-04-28 00:00:00
openSUSE Security Update : otrs (openSUSE-2020-1475)
2020-09-23 00:00:00
Debian DLA-3551-1 : otrs2 - LTS security update
2023-09-06 00:00:00
debian
debian
[SECURITY] [DLA 3551-1] otrs2 security update
2023-08-31 00:20:25