VDB
DEBIAN-CVE-2020-1776
DEBIAN-CVE-2020-1776
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Record from OSV · Published July 20, 2020
When an agent user is renamed or set to invalid the session belonging to the user is keept active. The session can not be used to access ticket data in the case the agent is invalid. This issue affects ((OTRS)) Community Edition: 6.0.28 and prior versions. OTRS: 7.0.18 and prior versions, 8.0.4. and prior versions.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| otrs2 | Debian:11 | 6.0.29-1 |
Risk scores
CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | otrs2 | 0, 2.0.4p01-10, 2.0.4p01-11 |
Timeline
- Jul 20, 2020 CVE Published
- Aug 27, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln DEBIAN-CVE-2020-1776
vulnetix vdb fixes DEBIAN-CVE-2020-1776Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/DEBIAN-CVE-2020-1776/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart