PT-2020-15046 · Otrs+2 · Otrs+3

Martin Møller · Published 2020-03-27 · Updated 2023-08-31 · CVE-2020-1769

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions OTRS Community Edition versions 5.0.41 and prior OTRS Community Edition versions 6.0.26 and prior OTRS versions 7.0.15 and prior

Description The issue is related to the use of autocomplete in the Username and Password fields on the login screens of both the agent and customer interfaces, which could be considered a security issue.

Recommendations For OTRS Community Edition versions 5.0.41 and prior, consider disabling the autocomplete feature for the Username and Password fields as a temporary workaround. For OTRS Community Edition versions 6.0.26 and prior, consider disabling the autocomplete feature for the Username and Password fields as a temporary workaround. For OTRS versions 7.0.15 and prior, consider disabling the autocomplete feature for the Username and Password fields as a temporary workaround.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

ALT-PU-2020-2649

ALT-PU-2020-2748

CVE-2020-1769

DLA-3551-1

OPENSUSE-SU-2020:0551-1

OPENSUSE-SU-2020:1475-1

OPENSUSE-SU-2020:1509-1

OPENSUSE-SU-2020_0551-1

OPENSUSE-SU-2020_1475-1

Affected Products

Alt Linux

Otrs

Otrs Community Edition

Suse

References · 52

• https://security-tracker.debian.org/tracker/CVE-2020-1769 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1769 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-1769 · Vendor Advisory
• https://otrs.com/release-notes/otrs-security-advisory-2020-06 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0551-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-1769 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1509-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3551-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-1769 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2020:1475-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1769 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-1769 · Vendor Advisory