CVE-2020-1778 Bypassing user account validation

2020-11-2300:00:00

CWE-287

OTRS

raw.githubusercontent.com

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

JSON

When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions.