← Back

CVE-2020-1773

nvd nist
Published: Mar 27, 2020Modified: Jun 17, 2026

JSON object

Loading...
8.1
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Exploitability: 2.8 / Impact: 5.2
Source: NVD

Description

An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, password reset tokens and automatically generated passwords. This issue affects ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS; 7.0.15 and prior versions.

Affected (3)

Products: Otrs: Otrs
Otrs
1 product
Otrs
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Otrs
Otrs
From 7.0.0 to 7.0.15
Otrs
From 5.0.0 to 5.0.41
Otrs
From 6.0.0 to 6.0.26

Related CWEs

CWE-331
Insufficient Entropy
The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.

References (10)

Source: security@otrs.com
Source: security@otrs.com
Source: security@otrs.com
Source: security@otrs.com
Source: security@otrs.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.