CVE-2020-1778

Publication date

2020-11-23 15:32:46

Family

OTRS

State

PUBLISHED

Description

When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions.