CVE-2020-1772

Source
https://nvd.nist.gov/vuln/detail/CVE-2020-1772
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-1772.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-1772
Downstream
Related
Published
2020-03-27T13:15:15Z
Modified
2024-11-21T05:11:21Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Token(s), generated by users which already requested new passwords. This issue affects: ((OTRS)) Community Edition 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.

References

Affected packages