Lucene search
MitreCVELIST:CVE-2020-26029HistoryDec 28, 2020 - 7:57 a.m.
CVE-2020-26029
2020-12-2807:57:36
mitre
www.cve.org
1
0.001 Low
EPSS
Percentile
28.4%
An issue was discovered in Zammad before 3.4.1. There are wrong authorization checks for impersonation requests via X-On-Behalf-Of. The authorization checks are performed for the actual user and not the one given in the X-On-Behalf-Of header.
Related
nvd
nvd
CVE-2020-26029
2020-12-28 08:15:11
cve
cve
CVE-2020-26029
2020-12-28 08:15:11
osv
osv
CVE-2020-26029
2020-12-28 08:15:11
prion
prion
Authorization
2020-12-28 08:15:00