CVE-2020-1773

Katalog CVE

CVSS 8.1 · High EPSS 1,5%

Kerentanan Insufficient Entropy pada otrs. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, password reset tokens and automatically generated passwords. This issue affects ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS; 7.0.15 and prior versions.

Rincian

Terbit di NVD

27 Maret 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-331: Insufficient Entropy

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 72,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://otrs.com/release-notes/otrs-security-advisory-2020-10/ advisory vendor
• http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html
• https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html