CVE-2023-29867

n/a / n/a PUBLISHED

Description (CNA)

Zammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker could gain information about linked accounts of users involved in their tickets using the Zammad API.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://zammad.com/en/advisories/zaa-2023-02

ADP enrichment

CVE

No English description supplied.

https://zammad.com/en/advisories/zaa-2023-02

CISA-ADP

No English description supplied.

No references supplied.