Dear osTicket support/community,
We're facing the issue that sometimes, an agent is logged in to the wrong account.
We had this issue already with an older version, so we upgraded, but the issue still persists.
System info:
- osTicket version: v1.18 (724de45)
- Web server : Apache
- MySql version: 5.7.36
- Php version: 8.2.6
- Login type: regular osTicket accounts, no SSO, AD or anything like that
Reproduction steps:
- Log in to account using agent login page
- Sometimes, the wrong account is active. The welcome message at the top right shows the wrong user name and when answering tickets, the answer is posted with the wrong user name.
The issue didn't occur for quite a while after the upgrade to v1.18, but now it appears frequently, and besides the issue being annoying, we're worrying about a potential security leak.
Does anybody have experience with this issue? Is it a bug?
KR, Niko