Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2020-1772HistoryMar 27, 2020 - 1:15 p.m.
CVE-2020-1772
2020-03-2713:15:15
Debian Security Bug Tracker
security-tracker.debian.org
5
0.007 Low
EPSS
Percentile
80.2%
It’s possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Token(s), generated by users which already requested new passwords. This issue affects: ((OTRS)) Community Edition 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | otrs2 | < 6.0.27-1 | otrs2_6.0.27-1_all.deb |
| Debian | 10 | all | otrs2 | < 6.0.16-2+deb10u1 | otrs2_6.0.16-2+deb10u1_all.deb |
Related
osv
osv
CVE-2020-1772
2020-03-27 13:15:15
otrs2 - security update
2023-08-31 00:00:00
cvelist
cvelist
CVE-2020-1772 Information Disclosure
2020-03-27 00:00:00
cve
cve
CVE-2020-1772
2020-03-27 13:15:15
prion
prion
Code injection
2020-03-27 13:15:00
ubuntucve
ubuntucve
CVE-2020-1772
2020-03-27 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2198-1)
2020-05-02 00:00:00
OTRS 5.0.x < 5.0.42, 6.0.x < 6.0.27, 7.0.x < 7.0.16 Multiple Vulnerabilities
2020-03-30 00:00:00
openSUSE: Security Advisory for Recommended (openSUSE-SU-2020:0551-1)
2020-04-26 00:00:00
nessus
nessus
Debian DLA-2198-1 : otrs2 security update
2020-05-04 00:00:00
openSUSE Security Update : otrs (openSUSE-2020-1475)
2020-09-23 00:00:00
openSUSE Security Update : otrs (openSUSE-2020-551)
2020-04-28 00:00:00