tocsin

Debian/otrs2: high 8.1

An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, passwo

Action: Upgrade otrs2 to 6.0.27-1 or later.

Affected

introducedfixedlast affected
06.0.27-1-

Fixed versions

6.0.27-1

Sources

published · modified · JSON