← CVE Intelligence

CVE-2020-1768

External Interface does not invalidate session PUBLISHED

Description (CNA)

The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS 7.0.x version 7.0.14 and prior versions.

Affected (CNA)

Vendor / productVersions
OTRS AG / OTRSaffected 7.0.x through 7.0.14

CWE

CWE-613

References

ADP enrichment

CVE

No English description supplied.