CVE-2020-1768 - CERT CVE
ID CVE-2020-1768
Sažetak The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS 7.0.x version 7.0.14 and prior versions.
Reference
CVSS
Base: 5.5
Impact: 4.9
Exploitability:8.0
Pristup
VektorSloženostAutentikacija
NETWORK LOW SINGLE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL NONE PARTIAL
CVSS vektor AV:N/AC:L/Au:S/C:P/I:N/A:P
Zadnje važnije ažuriranje 11-02-2020 - 16:16
Objavljeno 07-02-2020 - 16:15