CVE-2024-55578

Zammad before 6.4.1 places sensitive data such as authmicrosoftoffice365credentials and applicationsecret in log files...

CVE-2024-55578

creationtimestamp| type| source ---|---|--- 2024-12-09 03:11:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113620672079786191 2024-12-09 04:39:31+00:00| seen| https://t.me/cvedetector/12352...

CVE-2024-55578

Zammad before 6.4.1 places sensitive data such as authmicrosoftoffice365credentials and applicationsecret in log files...

CVE-2024-55578

The ticket management software Zammad (versions prior to 6.4.1 ) is vulnerable to the insertion of sensitive information into log files (CWE-532 ). The root cause is the inclusion of secrets such as auth_microsoft_office365_credentials and application_secret within the logs. This exposure could l...