CVE-2022-35490

Zammad 5.2.0 is vulnerable to privilege escalation. Zammad has a prevention against brute-force attacks trying to guess login credentials. After a configurable amount of attempts, users are invalidated and logins prevented. An attacker might work around this prevention, enabling them to send more...

CVE-2022-35490

Summary: CVE-2022-35490 affects Zammad 5.2.0 and describes a privilege-escalation due to bypassing the login-brute-force protection, allowing more authentication attempts before lockout. The issue is documented across multiple sources (NVD, Red Hat, OSV, CVE listing) with the same description. Th...