Rezultati pretraživanja za 'Proizvođač: zammad'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-43145 | 5.5 | With certain LDAP configurations, Zammad 5.0.1 was found to be vulnerable to unauthorized access with existing user accounts. | 2022-07-12 17:42:00 | 2022-02-04 15:15:00 |
| CVE-2021-42137 | 5.0 | An issue was discovered in Zammad before 5.0.1. In some cases, there is improper enforcement of the privilege requirement for viewing a list of tickets that shows title, state, etc. | 2022-07-12 17:42:00 | 2021-10-11 05:15:00 |
| CVE-2021-42087 | 4.0 | An issue was discovered in Zammad before 4.1.1. An admin can discover the application secret via the API. | 2022-07-12 17:42:00 | 2021-10-07 21:15:00 |
| CVE-2021-42086 | 6.5 | An issue was discovered in Zammad before 4.1.1. An Agent account can modify account data, and gain admin access, via a crafted request. | 2022-07-12 17:42:00 | 2021-10-07 21:15:00 |
| CVE-2021-35302 | 5.0 | Incorrect Access Control for linked Tickets in Zammad 1.0.x up to 4.0.0 allows remote attackers to obtain sensitive information. | 2022-07-12 17:42:00 | 2021-06-28 20:15:00 |
| CVE-2021-35301 | 5.0 | Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows remote attackers to obtain sensitive information via the Ticket Article detail view. | 2022-07-12 17:42:00 | 2021-06-28 20:15:00 |
| CVE-2021-35299 | 5.0 | Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive information via email connection configuration probing. | 2022-07-12 17:42:00 | 2021-06-28 20:15:00 |
| CVE-2022-29701 | 5.0 | A lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messa | 2022-05-05 19:56:00 | 2022-04-27 03:15:00 |
| CVE-2022-29700 | 5.0 | A lack of password length restriction in Zammad v5.1.0 allows for the creation of extremely long passwords which can cause a Denial of Service (DoS) during password verification. | 2022-05-05 19:48:00 | 2022-04-27 03:15:00 |
| CVE-2022-27331 | 4.0 | An access control issue in Zammad v5.0.3 broadcasts administrative configuration changes to all users who have an active application instance, including settings that should only be visible to authenticated users. | 2022-05-05 19:34:00 | 2022-04-27 03:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/10
Zapisa po stranici: