diff --git a/2020/1xxx/CVE-2020-1776.json b/2020/1xxx/CVE-2020-1776.json index a42fb131063..00a011c0ed3 100644 --- a/2020/1xxx/CVE-2020-1776.json +++ b/2020/1xxx/CVE-2020-1776.json @@ -1,18 +1,121 @@ { - "data_type": "CVE", - "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { + "ASSIGNER": "security@otrs.com", + "DATE_PUBLIC": "2020-07-20T00:00:00.000Z", "ID": "CVE-2020-1776", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "STATE": "PUBLIC", + "TITLE": "Invalidating or changing user does not invalidate session" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "((OTRS)) Community Edition", + "version": { + "version_data": [ + { + "version_affected": "<=", + "version_name": "6.0.x", + "version_value": "6.0.28" + } + ] + } + }, + { + "product_name": "OTRS", + "version": { + "version_data": [ + { + "version_affected": "<=", + "version_name": "7.0.x", + "version_value": "7.0.18" + }, + { + "version_affected": "<=", + "version_name": "8.0.x", + "version_value": "8.0.4" + } + ] + } + } + ] + }, + "vendor_name": "OTRS AG" + } + ] + } + }, + "credit": [ + { + "lang": "eng", + "value": "Marvin Voormann" + } + ], + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "When an agent user is renamed or set to invalid the session belonging to the user is keept active. The session can not be used to access ticket data in the case the agent is invalid.\n\nThis issue affects\n((OTRS)) Community Edition: \n6.0.28 and prior versions.\n\nOTRS:\n7.0.18 and prior versions,\n8.0.4. and prior versions." } ] + }, + "generator": { + "engine": "Vulnogram 0.0.9" + }, + "impact": { + "cvss": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "NONE", + "baseScore": 3.5, + "baseSeverity": "LOW", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "privilegesRequired": "LOW", + "scope": "UNCHANGED", + "userInteraction": "REQUIRED", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N", + "version": "3.1" + } + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-613 Insufficient Session Expiration" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "name": "https://otrs.com/release-notes/otrs-security-advisory-2020-13/", + "refsource": "CONFIRM", + "url": "https://otrs.com/release-notes/otrs-security-advisory-2020-13/" + } + ] + }, + "solution": [ + { + "lang": "eng", + "value": "Upgrade to OTRS 8.0.5, OTRS 7.0.19, ((OTRS)) Community Edition 6.0.29\nPatch for ((OTRS)) Community Edition 6: https://github.com/OTRS/otrs/commit/4514f95f747be368c3dc9a9452ff9aa66506648d" + } + ], + "source": { + "advisory": "OSA-2020-13", + "defect": [ + "2020052042004084" + ], + "discovery": "INTERNAL" } } \ No newline at end of file