Rezultati pretraživanja za 'Proizvođač: zammad'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-26028 | 4.0 | An issue was discovered in Zammad before 3.4.1. Admin Users without a ticket.* permission can access Tickets. | 2020-12-29 14:49:00 | 2020-12-28 08:15:00 |
| CVE-2020-26029 | 4.0 | An issue was discovered in Zammad before 3.4.1. There are wrong authorization checks for impersonation requests via X-On-Behalf-Of. The authorization checks are performed for the actual user and not the one given in the X-On-Behalf-Of header. | 2020-12-29 14:40:00 | 2020-12-28 08:15:00 |
| CVE-2020-26030 | 7.5 | An issue was discovered in Zammad before 3.4.1. There is an authentication bypass in the SSO endpoint via a crafted header, when SSO is not configured. An attacker can create a valid and authenticated session that can be used to perform any actions i | 2020-12-29 14:31:00 | 2020-12-28 08:15:00 |
| CVE-2020-26031 | 4.0 | An issue was discovered in Zammad before 3.4.1. The global-search feature leaks Knowledge Base drafts to Knowledge Base readers (who are authenticated but have insufficient permissions). | 2020-12-29 14:29:00 | 2020-12-28 08:15:00 |
| CVE-2020-26032 | 5.0 | An SSRF issue was discovered in Zammad before 3.4.1. The SMS configuration interface for Massenversand is implemented in a way that renders the result of a test request to the User. An attacker can use this to request any URL via a GET request from t | 2020-12-29 14:27:00 | 2020-12-28 08:15:00 |
| CVE-2020-26033 | 5.8 | An issue was discovered in Zammad before 3.4.1. The Tag and Link REST API endpoints (for add and delete) lack a CSRF token check. | 2020-12-29 14:26:00 | 2020-12-28 08:15:00 |
| CVE-2020-26035 | 3.5 | An issue was discovered in Zammad before 3.4.1. There is Stored XSS via a Tags element in a TIcket. | 2020-12-29 14:20:00 | 2020-12-28 08:15:00 |
| CVE-2020-14213 | 5.5 | In Zammad before 3.3.1, a Customer has ticket access that should only be available to an Agent (e.g., read internal data, split, or merge). | 2020-06-23 01:09:00 | 2020-06-16 23:15:00 |
| CVE-2020-10102 | 3.5 | An issue was discovered in Zammad 3.0 through 3.2. The Forgot Password functionality is implemented in a way that would enable an anonymous user to guess valid user emails. In the current implementation, the application responds differently depending | 2020-03-05 23:20:00 | 2020-03-05 01:15:00 |
| CVE-2020-10096 | 5.0 | An issue was discovered in Zammad 3.0 through 3.2. It does not prevent caching of confidential data within browser memory. An attacker who either remotely compromises or obtains physical access to a user's workstation can browse the browser cache con | 2020-03-05 19:31:00 | 2020-03-05 01:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/10
Zapisa po stranici: