CVE-2021-35301: Medium severity zammad vulnerability
Published Jun 28, 2021
·Updated
Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows remote attackers to obtain sensitive information via the Ticket Article detail view.
Affected Software
1 affected component
Zammad Zammad>=1.0.0<=4.0.0
Event History
Jun 28, 2021
CVE Published
via MITRE·07:06 PM
Data Sourced
via MITRE·07:06 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-35301?
The severity of CVE-2021-35301 is medium with a CVSS score of 5.3.
2
How does CVE-2021-35301 affect Zammad?
CVE-2021-35301 affects Zammad versions 1.0.x up to 4.0.0.
3
What is the vulnerability in Zammad?
The vulnerability in Zammad is an incorrect access control issue.
4
How can remote attackers exploit CVE-2021-35301?
Remote attackers can exploit CVE-2021-35301 to obtain sensitive information via the Ticket Article detail view.
5
Is there a solution available for CVE-2021-35301?
Yes, there is a solution available for CVE-2021-35301. Refer to the advisory provided by Zammad for more details.