CVE-2020-1776

—

CVSS 3.1

4.3 medium

EPSS

<1%p57

Published

Jul 20, 2020 (Jul 20, 2020)

Modified

Jun 17, 2026

Description

When an agent user is renamed or set to invalid the session belonging to the user is keept active. The session can not be used to access ticket data in the case the agent is invalid. This issue affects ((OTRS)) Community Edition: 6.0.28 and prior versions. OTRS: 7.0.18 and prior versions, 8.0.4. and prior versions.

Vendors: otrs
Products: otrs
Weakness: CWE-613
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.