When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions.CreditsLászló GyarakiReferenceshttps://otrs.com/release-notes/otrs-security-advisory-2020-16/
