CVE-2020-1778
Bypassing user account validation
When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions.
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Affected products
OTRS AG · OTRSWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →