CVE-2021-42086: High severity Zammad Zammad vulnerability
Published Oct 7, 2021
·Updated
An issue was discovered in Zammad before 4.1.1. An Agent account can modify account data, and gain admin access, via a crafted request.
Affected Software
1 affected component
Zammad Zammad<4.1.1
Event History
Oct 7, 2021
CVE Published
via MITRE·07:36 PM
Data Sourced
via MITRE·07:36 PM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-42086.
2
What is the severity of CVE-2021-42086?
The severity of CVE-2021-42086 is high with a CVSS score of 8.8.
3
What is the affected software for CVE-2021-42086?
The affected software for CVE-2021-42086 is Zammad before version 4.1.1.
4
How can an Agent account exploit CVE-2021-42086?
An Agent account can exploit CVE-2021-42086 by modifying account data and gaining admin access through a crafted request.
5
Is there a fix available for CVE-2021-42086?
Yes, a fix is available for CVE-2021-42086 in Zammad version 4.1.1.