CVE-2020-26034

An account-enumeration issue was discovered in Zammad before 3.4.1. The Create User functionality is implemented in a way that would enable an anonymous user to guess valid user email addresses. The application responds differently depending on whether the input supplied was recognized as...

CVE-2020-26034

An account-enumeration issue was discovered in Zammad before 3.4.1. The Create User functionality is implemented in a way that would enable an anonymous user to guess valid user email addresses. The application responds differently depending on whether the input supplied was recognized as...

CVE-2020-26034

CVE-2020-26034 affects Zammad before 3.4.1, where the Create User feature enables account enumeration: an anonymous user can guess valid email addresses because the app’s responses differ based on whether the input is associated with a valid user. This is confirmed across multiple sources in the ...