4 matches found
CVE-2020-26028
An issue was discovered in Zammad before 3.4.1. Admin Users without a ticket. permission can access Tickets...
4.9CVSS5.1AI score0.00852EPSS
SaveExploits0References1
CVE-2020-26028
An issue was discovered in Zammad before 3.4.1. Admin Users without a ticket. permission can access Tickets...
4.9CVSS6.8AI score
SaveExploits0References1
CVE-2020-26028
Zammad prior to 3.4.1 contains an improper access control vulnerability where Admin Users lacking the ticket.* permission can access Tickets. The issue, described across multiple sources (NVD entry for CVE-2020-26028 and Red Hat/CNVD entries), stems from insufficient permission checks in the admi...
4.9CVSS5.1AI score0.00852EPSS
SaveExploits0References1Affected Software1
20