CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2020/12/28 8:15 a.m.•20 views

CVE-2020-26028

An issue was discovered in Zammad before 3.4.1. Admin Users without a ticket. permission can access Tickets...

4.9CVSS5.1AI score0.00852EPSS

Exploits0References1

OSV•added 2020/12/28 8:15 a.m.•12 views

CVE-2020-26028

An issue was discovered in Zammad before 3.4.1. Admin Users without a ticket. permission can access Tickets...

4.9CVSS6.8AI score

Exploits0References1

CVE•added 2020/12/28 7:57 a.m.•55 views

CVE-2020-26028

Zammad prior to 3.4.1 contains an improper access control vulnerability where Admin Users lacking the ticket.* permission can access Tickets. The issue, described across multiple sources (NVD entry for CVE-2020-26028 and Red Hat/CNVD entries), stems from insufficient permission checks in the admi...

4.9CVSS5.1AI score0.00852EPSS

Exploits0References1Affected Software1