Vulnerabilities > CVE-2020-1768 - Insufficient Session Expiration vulnerability in Otrs
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
LOW Integrity impact
NONE Availability impact
LOW Summary
The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS 7.0.x version 7.0.14 and prior versions.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 13 |