CVE-2020-10097
First published: Thu Mar 05 2020(Updated: )
An issue was discovered in Zammad 3.0 through 3.2. It may respond with verbose error messages that disclose internal application or infrastructure information. This information could aid attackers in successfully exploiting other vulnerabilities.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zammad Zammad | >=1.0.0<=3.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-10097.
What is the severity of CVE-2020-10097?
The severity of CVE-2020-10097 is medium with a CVSS score of 5.3.
What is the affected software?
The affected software is Zammad version 3.0 through 3.2.
How does CVE-2020-10097 impact the affected software?
CVE-2020-10097 may respond with verbose error messages that disclose internal application or infrastructure information, which could aid attackers in exploiting other vulnerabilities.
Is there a fix available for CVE-2020-10097?
Yes, a fix is available. Please refer to the security advisory from Zammad for more information on how to mitigate this vulnerability.
- collector/nvd-index
- agent/weakness
- agent/tags
- agent/event
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/zammad
- canonical/zammad zammad
- version/zammad zammad/1.0.0
- version/zammad zammad/3.2.0