CVE-2020-1777: Agent names disclosed in chat feature
First published: Thu Oct 15 2020(Updated: )
Agent names that participates in a chat conversation are revealed in certain parts of the external interface as well as in chat transcriptions inside the tickets, when system is configured to mask real agent names. This issue affects OTRS; 7.0.21 and prior versions, 8.0.6 and prior versions.
Credit: security@otrs.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Otrs Otrs | >=7.0.0<=7.0.21 | |
| Otrs Otrs | >=8.0.0<=8.0.6 |
Remedy
Upgrade to OTRS 7.0.22, OTRS 8.0.7
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability CVE-2020-1777?
CVE-2020-1777 is a vulnerability in OTRS that reveals agent names in certain parts of the external interface and chat transcriptions inside tickets.
How does CVE-2020-1777 affect OTRS?
CVE-2020-1777 affects OTRS versions 7.0.21 and prior, as well as 8.0.6 and prior.
What is the severity of CVE-2020-1777?
The severity of CVE-2020-1777 is medium, with a CVSS score of 5.3.
How can I fix CVE-2020-1777?
To fix CVE-2020-1777, update OTRS to version 7.0.22 or 8.0.7, or later.
Where can I find more information about CVE-2020-1777?
You can find more information about CVE-2020-1777 in the OTRS Security Advisory 2020-15: [OTRS Security Advisory 2020-15](https://otrs.com/release-notes/otrs-security-advisory-2020-15/)
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/remedy
- agent/references
- agent/title
- agent/last-modified-date
- agent/weakness
- agent/tags
- agent/event
- agent/description
- agent/first-publish-date
- vendor/otrs
- canonical/otrs otrs
- version/otrs otrs/7.0.0
- version/otrs otrs/7.0.21
- version/otrs otrs/8.0.0
- version/otrs otrs/8.0.6