CVE-2020-1768
External Interface does not invalidate session
The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS 7.0.x version 7.0.14 and prior versions.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Productos afectados
OTRS AG · OTRS¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →