CVE-2020-1768 — External Interface does not invalidate session
The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. Th…
Published: 2020-02-07 · CVSS: 5.4 · CVSS 3.1
The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS 7.0.x version 7.0.14 and prior versions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7