CVE-2020-10104

CVE-2020-10104 affects Zammad 3.0–3.2. After authentication, the app transmits sensitive data to the user, allowing potential compromise and unauthorized access. Specifically, hashed passwords are returned to the user when visiting a certain URL. Red Hat and multiple feeds corroborate the issue i...