Filter
AND
Versions
Zammad ZammadZammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker coul…
6.5
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 4.1.1. An attacker with valid agent credentials may send a …
6.5
First published (updated )
Zammad ZammadZammad before 3.3.1, when Domain Based Assignment is enabled, relies on a claimed e-mail address for…
6.5
First published (updated )
Zammad ZammadAn issue was discovered in Zammad 3.0 through 3.2. It allows for users to view ticket customer detai…
6.5
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 3.4.1. There are wrong authorization checks for impersonati…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadZammad 5.3.x (Fixed in 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker w…
6.5
First published (updated )
Zammad ZammadZammad 5.2.1 is vulnerable to Incorrect Access Control. Zammad's asset handling mechanism has logic …
6.5
First published (updated )
Zammad ZammadIn Zammad 5.2.0, customers who have secondary organizations assigned were able to see all organizati…
6.5
First published (updated )
Zammad ZammadAn issue in Zammad v5.4.0 allows attackers to bypass e-mail verification using an arbitrary address …
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadAn issue was discovered in Zammad before 6.2.0. In several subsystems, SSL/TLS was used to establish…
5.9
First published (updated )
Zammad ZammadIn Zammad before 3.3.1, a Customer has ticket access that should only be available to an Agent (e.g.…
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadIncorrect Access Control for linked Tickets in Zammad 1.0.x up to 4.0.0 allows remote attackers to o…
5.3
First published (updated )
Zammad ZammadAn issue was discovered in Zammad 3.0 through 3.2. It returns source code of static resources when s…
5.3
First published (updated )
Zammad ZammadAn issue was discovered in Zammad 3.0 through 3.2. It may respond with verbose error messages that d…
5.3
First published (updated )
Zammad ZammadAn issue was discovered in Zammad 3.0 through 3.2. The Forgot Password functionality is implemented …
5.3
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 5.0.1. In some cases, there is improper enforcement of the …
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.