CVE-2024-55578: Medium severity zammad vulnerability
Published Dec 9, 2024
·Updated
Zammad before 6.4.1 places sensitive data (such as authmicrosoftoffice365credentials and applicationsecret) in log files.
Affected Software
3 affected components
Zammad Zammad<6.4.1
Zammad Zammad=6.4.0
Zammad Zammad=6.4.0-alpha
Event History
Dec 9, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-55578?
CVE-2024-55578 is classified as a high severity vulnerability due to its exposure of sensitive data in log files.
2
How does CVE-2024-55578 affect Zammad?
CVE-2024-55578 affects Zammad versions prior to 6.4.1 by logging sensitive credentials and application secrets.
3
How do I fix CVE-2024-55578?
To fix CVE-2024-55578, upgrade Zammad to version 6.4.1 or later.
4
What sensitive data is exposed in CVE-2024-55578?
CVE-2024-55578 exposes sensitive data such as auth_microsoft_office365_credentials and application_secret in log files.
5
Is it safe to use Zammad versions prior to CVE-2024-55578 fix?
It is not safe to use Zammad versions prior to the fix for CVE-2024-55578 due to the risk of exposing sensitive data.