Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-26029
HistoryDec 28, 2020 - 8:15 a.m.

Authorization

2020-12-2808:15:00
PRIOn knowledge base
www.prio-n.com
4

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

An issue was discovered in Zammad before 3.4.1. There are wrong authorization checks for impersonation requests via X-On-Behalf-Of. The authorization checks are performed for the actual user and not the one given in the X-On-Behalf-Of header.

CPENameOperatorVersion
zammadge1.0.0
zammadlt3.4.1

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

Related for PRION:CVE-2020-26029