Get a Pentest and security assessment of your IT network.

2021-current

CVE-2020-1769 – In the login screens (in agent and customer interface), Username and Pass

In the login screens (in agent and customer interface), Username and Password fields use autocomplete, which might be considered as security issue. This issue affects: ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1769

Reference (s):

  • https://otrs.com/release-notes/otrs-security-advisory-2020-06/
  • SUSE:openSUSE-SU-2020:0551
  • URL: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html
  • SUSE:openSUSE-SU-2020:1475
  • URL: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html
Related posts
2021-current

CVE-2004-1715 - Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 all

2021-current

CVE-2014-8508 - Cross-site scripting (XSS) vulnerability in s_network.asp in the Denon AV

2021-current

CVE-2020-0297 - In devicepolicy service, there is a possible permission bypass due to an

2021-current

CVE-2020-14315 - A memory corruption vulnerability is present in bspatch as shipped in Col