CVE-2020-1776

If an agent user is renamed or marked as invalid, the session associated with that user remains active. However, when the agent is invalid, the session cannot be utilized to retrieve ticket data. This problem impacts ((OTRS)) Community Edition versions 6.0.28 and earlier, OTRS versions 7.0.18 and earlier, as well as versions 8.0.4. and earlier.