CVE-2020-1778 — Bypassing user account validation
When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior ve…
Published: 2020-11-23 · CVSS: 4.1 · CVSS 3.1
When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7