An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, password reset tokens and automatically generated passwords. This issue affects ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS; 7.0.15 and prior versions.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: OTRS
Published: 2020-03-27T00:00:00
Updated: 2023-08-31T02:06:15.836917
Reserved: 2019-11-29T00:00:00
Link: CVE-2020-1773
JSON object: View
NVD Information
Status : Modified
Published: 2020-03-27T13:15:15.473
Modified: 2023-08-31T03:15:11.467
Link: CVE-2020-1773
JSON object: View
Redhat Information
No data.
CWE