CVE Vulnerabilities

CVE-2020-1769

Published: Mar 27, 2020 | Modified: Aug 31, 2023
CVSS 3.x
4.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
LOW

In the login screens (in agent and customer interface), Username and Password fields use autocomplete, which might be considered as security issue. This issue affects: ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.

Affected Software

Name Vendor Start Version End Version
Otrs Otrs 5.0.0 (including) 5.0.41 (including)
Otrs Otrs 6.0.0 (including) 6.0.26 (including)
Otrs Otrs 7.0.0 (including) 7.0.15 (including)
Otrs2 Ubuntu bionic *
Otrs2 Ubuntu eoan *
Otrs2 Ubuntu trusty *
Otrs2 Ubuntu xenial *

References