2 matches found
Improper access control
Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive information via email connection configuration probing...
5CVSS7.3AI score0.01119EPSS
SaveExploits0References1Affected Software1
CVE-2021-35299: Insertion of Sensitive Information into Log File
Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive information via email connection configuration probing...
7.5CVSS5.6AI score0.01119EPSS
SaveExploits0References2
20