Otrs · Otrs · CVE-2020-1773
**Name of the Vulnerable Software and Affected Versions**
OTRS Community Edition versions 5.0.41 and prior
OTRS Community Edition versions 6.0.26 and prior
OTRS versions 7.0.15 and prior
**Description**
An attacker with the ability to generate session IDs or password reset tokens may be able to predict other users' session IDs, password reset tokens, and automatically generated passwords. This issue can be exploited by an authenticated user to guess other session IDs, password reset tokens, or automated passwords.
**Recommendations**
For OTRS Community Edition versions 5.0.41 and prior, update to a version later than 5.0.41.
For OTRS Community Edition versions 6.0.26 and prior, update to a version later than 6.0.26.
For OTRS versions 7.0.15 and prior, update to a version later than 7.0.15.