[IT-SecNots] [announce] New Security Updates for OTRS

[Melanie Krüger <melanie.krueger AT otrs.com>]

Security Advisories

Dear reader,

The following security fix was made:

OTRS Security Advisory 2020-13

ID: OSA-2020-13 
Date: 2020-07-20
Title: Invalidating or changing user does not invalidate session
Severity: 3.5 LOW 
Product: OTRS 8.0.x, OTRS 7.0.x, OTRS 6.0.x
Fixed in: OTRS 8.0.5 OTRS 7.0.19, OTRS 6.0.29
FULL CVSS VECTOR: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
References: CVE-2020-1776

To read the entire Security Advisory/Advisories, please follow this link:
https://otrs.com/overview-release-notes-security-advisories/security-advisories/ 

Kind regards, 
Your OTRS release team 

   

Visit www.otrs.com or contact us. 

OTRS AG

Zimmersmühlenweg 11
61440 Oberursel 
Germany
+49 6172 681988 0

Attachment: smime.p7s
Description: S/MIME cryptographic signature

---------------------------------------------------------------------
OTRS mailing list: announce - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/announce
To unsubscribe: http://lists.otrs.org/mailman/listinfo/announce