Filter
AND
AND
Versions
Zammad ZammadAn issue was discovered in Zammad before 5.0.1. In some cases, there is improper enforcement of the …
5.3
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 4.1.1. An attacker with valid agent credentials may send a …
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadAn issue was discovered in Zammad before 4.1.1. An admin can discover the application secret via the…
4.9
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 3.5.1. An Agent with Customer permissions in a Group can by…
4.3
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 3.5.1. The default signup Role (for newly created Users) ca…
4.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadAn issue was discovered in Zammad before 3.4.1. Admin Users without a ticket.* permission can access…
4.9
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 3.4.1. There are wrong authorization checks for impersonati…
6.5
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 3.4.1. The global-search feature leaks Knowledge Base draft…
4.3
First published (updated )
Zammad ZammadAn account-enumeration issue was discovered in Zammad before 3.4.1. The Create User functionality is…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadZammad before 3.3.1, when Domain Based Assignment is enabled, relies on a claimed e-mail address for…
6.5
First published (updated )
Zammad ZammadIn Zammad before 3.3.1, a Customer has ticket access that should only be available to an Agent (e.g.…
5.5
First published (updated )
Zammad ZammadAn issue was discovered in Zammad 3.0 through 3.2. It returns source code of static resources when s…
5.3
First published (updated )
Zammad ZammadAn issue was discovered in Zammad 3.0 through 3.2. It may respond with verbose error messages that d…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadAn issue was discovered in Zammad 3.0 through 3.2. It allows for users to view ticket customer detai…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadAn issue was discovered in Zammad 3.0 through 3.2. The Forgot Password functionality is implemented …
5.3
First published (updated )
Zammad ZammadIn Zammad 5.0.2, agents can configure "out of office" periods and substitute persons. If the substit…
5.3
First published (updated )
Zammad ZammadIncorrect Access Control for linked Tickets in Zammad 1.0.x up to 4.0.0 allows remote attackers to o…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.