CVE-2020-1767

Katalog CVE

CVSS 4.3 · Medium EPSS 1,2%

Kerentanan pada otrs, debian linux. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

Agent A is able to save a draft (i.e. for customer reply). Then Agent B can open the draft, change the text completely and send it in the name of Agent A. For the customer it will not be visible that the message was sent by another agent. This issue affects: ((OTRS)) Community Edition 6.0.x version 6.0.24 and prior versions. OTRS 7.0.x version 7.0.13 and prior versions.

Rincian

Terbit di NVD

10 Januari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 67,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://otrs.com/release-notes/otrs-security-advisory-2020-03/ release notes · advisory vendor
• https://lists.debian.org/debian-lts-announce/2020/01/msg00027.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html