CVE-2020-1769: Autocomplete in the form login screens
In the login screens (in agent and customer interface), Username and Password fields use autocomplete, which might be considered as security issue. This issue affects: ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OTRS Community Editionto a version that resolves this vulnerability.Fixed in 7.0.16Patch 7974ea582211c13730d223fc4dcdffa542af423f - Upgrade
Upgrade
OTRS Community Editionto a version that resolves this vulnerability.Fixed in 6.0.27Patch 1b74e24582c946d02209acfc248d4ba451251f93 - Upgrade
Upgrade
OTRS Community Editionto a version that resolves this vulnerability.Fixed in 5.0.42
Event History
Frequently Asked Questions
What is CVE-2020-1769?
CVE-2020-1769 is a vulnerability in ((OTRS)) Community Edition and OTRS versions 7.0.15 and prior versions that allows for autocomplete in Username and Password fields in the login screens, which could be considered a security issue.
Which software versions are affected by CVE-2020-1769?
CVE-2020-1769 affects ((OTRS)) Community Edition versions 5.0.41 and prior, 6.0.26 and prior, as well as OTRS versions 7.0.15 and prior.
What is the severity rating of CVE-2020-1769?
CVE-2020-1769 has a severity rating of 4.3, which is considered medium.
How does CVE-2020-1769 affect user login?
CVE-2020-1769 allows autocomplete in Username and Password fields on the login screens, which can pose a security risk.
Are there any patches or fixes available for CVE-2020-1769?
Upgrading ((OTRS)) Community Edition to version 5.0.42, 6.0.27, or later, or upgrading OTRS to version 7.0.16 or later, resolves the vulnerability.