CLEANSTART-2024-VZ65902

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-VZ65902.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2024-VZ65902
Upstream
Published
2026-10-31T14:36:12Z
Modified
2026-10-31T16:30:11Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, passwo...
Details

Security vulnerability affects the otrs package. An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, password reset tokens and automatically generated passwords.

References

Affected packages

CleanStart / otrs

Package

Name
otrs
Purl
pkg:apk/cleanstart/otrs?arch=noarch

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.0.33-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-VZ65902.json"