4 matches found
UBUNTU-CVE-2026-93582
The HTTP Basic Authentication modules in OTRS Community Edition 6 and prior accept the authenticated username from either the REMOTEUSER or HTTPREMOTEUSER environment variable. In CGI and modperl based deployments, HTTP request headers may be mapped to corresponding HTTP environment variables. As...
CVE-2026-93582 Authentication Bypass via Spoofed Remote-User Header in HTTP Basic Authentication
The HTTP Basic Authentication modules in OTRS Community Edition 6 and prior accept the authenticated username from either the REMOTEUSER or HTTPREMOTEUSER environment variable. In CGI and modperl based deployments, HTTP request headers may be mapped to corresponding HTTP environment variables. As...
CVE-2026-93582 Authentication Bypass via Spoofed Remote-User Header in HTTP Basic Authentication
The HTTP Basic Authentication modules in OTRS Community Edition 6 and prior accept the authenticated username from either the REMOTEUSER or HTTPREMOTEUSER environment variable. In CGI and modperl based deployments, HTTP request headers may be mapped to corresponding HTTP environment variables. As...
CVE-2026-93582
The HTTP Basic Authentication modules in OTRS Community Edition 6 and prior are vulnerable to an authentication bypass (CWE-290). The root cause is that the application accepts authenticated usernames from the REMOTE_USER or HTTP_REMOTE_USER environment variables. In CGI or mod_perl deployments, ...