First published: Fri Feb 04 2022(Updated: )
With certain LDAP configurations, Zammad 5.0.1 was found to be vulnerable to unauthorized access with existing user accounts.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Zammad Zammad | =5.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID of this Zammad vulnerability is CVE-2021-43145.
The severity of CVE-2021-43145 is high.
Zammad version 5.0.1 is affected by CVE-2021-43145.
CVE-2021-43145 makes Zammad 5.0.1 vulnerable to unauthorized access with existing user accounts when certain LDAP configurations are in place.
Yes, a fix for CVE-2021-43145 is available. Please check the official advisory for more details: [Zammad Advisory ZAA-2021-20](https://zammad.com/de/advisories/zaa-2021-20).