782 matches found
Spoofing
An issue was discovered in Zammad before 3.5.1. An Agent with Customer permissions in a Group can bypass intended access control on internal Articles via the Ticket detail view...
Design/Logic Flaw
An issue was discovered in Zammad before 3.4.1. The global-search feature leaks Knowledge Base drafts to Knowledge Base readers who are authenticated but have insufficient permissions...
Cross site request forgery (csrf)
An issue was discovered in Zammad before 3.4.1. The Tag and Link REST API endpoints for add and delete lack a CSRF token check...
Design/Logic Flaw
An issue was discovered in Zammad before 3.5.1. The default signup Role for newly created Users can be a privileged Role, if configured by an admin. This behvaior was unintended...
Design/Logic Flaw
An issue was discovered in Zammad before 3.5.1. A REST API call allows an attacker to change Ticket Article data in a way that defeats auditing...
CVE-2020-26028
Zammad prior to 3.4.1 contains an improper access control vulnerability where Admin Users lacking the ticket.* permission can access Tickets. The issue, described across multiple sources (NVD entry for CVE-2020-26028 and Red Hat/CNVD entries), stems from insufficient permission checks in the admi...
CVE-2020-26028
An issue was discovered in Zammad before 3.4.1. Admin Users without a ticket. permission can access Tickets...
CVE-2020-26029
CVE-2020-26029 affects Zammad before 3.4.1, with incorrect authorization checks for impersonation requests via the X-On-Behalf-Of header. The checks are applied to the actual user rather than the user in the X-On-Behalf-Of header, creating a potential authorization bypass. The CVSS data indicates...
CVE-2020-26029
An issue was discovered in Zammad before 3.4.1. There are wrong authorization checks for impersonation requests via X-On-Behalf-Of. The authorization checks are performed for the actual user and not the one given in the X-On-Behalf-Of header...
CVE-2020-26030
CVE-2020-26030 affects Zammad prior to 3.4.1. There is an authentication bypass in the SSO endpoint via a crafted header when SSO is not configured, allowing an attacker to create a valid authenticated session and perform actions in the name of other users. The description is corroborated across ...
CVE-2020-26030
An issue was discovered in Zammad before 3.4.1. There is an authentication bypass in the SSO endpoint via a crafted header, when SSO is not configured. An attacker can create a valid and authenticated session that can be used to perform any actions in the name of other users...
CVE-2020-26031
Affected software / component: Zammad before 3.4.1. Vulnerability summary: Global-search feature leaks Knowledge Base drafts to Knowledge Base readers who are authenticated but have insufficient permissions, enabling information disclosure. The issue affects the knowledge base drafts handled by g...
CVE-2020-26031
An issue was discovered in Zammad before 3.4.1. The global-search feature leaks Knowledge Base drafts to Knowledge Base readers who are authenticated but have insufficient permissions...
CVE-2020-26032
CVE-2020-26032 describes an SSRF in Zammad before 3.4.1. The SMS configuration interface for Massenversand renders the results of a test request to the user, allowing an attacker to trigger a GET request to an arbitrary URL from the server’s network interface, potentially disclosing information f...
CVE-2020-26032
An SSRF issue was discovered in Zammad before 3.4.1. The SMS configuration interface for Massenversand is implemented in a way that renders the result of a test request to the User. An attacker can use this to request any URL via a GET request from the network interface of the server. This may le...
CVE-2020-26033
CVE-2020-26033 affects Zammad prior to version 3.4.1, where the Tag and Link REST API endpoints (add and delete) do not perform CSRF token validation. Connected sources corroborate a CSRF vulnerability in the labeling/linking REST paths, with broader references noting fixes in newer releases (e.g...
CVE-2020-26033
An issue was discovered in Zammad before 3.4.1. The Tag and Link REST API endpoints for add and delete lack a CSRF token check...
CVE-2020-26034
CVE-2020-26034 affects Zammad before 3.4.1, where the Create User feature enables account enumeration: an anonymous user can guess valid email addresses because the app’s responses differ based on whether the input is associated with a valid user. This is confirmed across multiple sources in the ...
CVE-2020-26034
An account-enumeration issue was discovered in Zammad before 3.4.1. The Create User functionality is implemented in a way that would enable an anonymous user to guess valid user email addresses. The application responds differently depending on whether the input supplied was recognized as...