Get a Pentest and security assessment of your IT network.

2021-current

CVE-2020-1769 – In the login screens (in agent and customer interface), Username and Pass

In the login screens (in agent and customer interface), Username and Password fields use autocomplete, which might be considered as security issue. This issue affects: ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1769

Reference (s):

  • https://otrs.com/release-notes/otrs-security-advisory-2020-06/
  • SUSE:openSUSE-SU-2020:0551
  • URL: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html
  • SUSE:openSUSE-SU-2020:1475
  • URL: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html
Related posts
2021-current

CVE-2004-1715 - Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 all

2021-current

CVE-2014-4742 - Cross-site scripting (XSS) vulnerability in system/class_link.php in the

2021-current

CVE-2014-9837 - coders/pnm.c in ImageMagick 6.9.0-1 Beta and earlier allows remote attack

2021-current

CVE-2020-10446 - The way URIs are handled in admin/header.php in Chadha PHPKB Standard Mul