CoreCVE
Back

HIGH

Zammad 5.2.0 suffers from Incorrect Access Control

Published Aug 8, 2022

Description

Zammad 5.2.0 suffers from Incorrect Access Control. Zammad did not correctly perform authorization on certain attachment endpoints. This could be abused by an unauthenticated attacker to gain access to attachments, such as emails or attached files.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-863

Incorrect Authorization

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Aug 8, 2022
Updated Aug 3, 2024
Reserved Jul 11, 2022
Link CVE-2022-35487
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-35487
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-35487
ENISA EUVD
Assigner mitre
Published Aug 8, 2022
Updated Aug 3, 2024
Exploited since n/a
Link EUVD-2022-38375
EUVD-2022-38375