CVEvulnerability

CVE-2022-27331

4.3 MEDIUM Published 2022-04-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-04-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-668

Description

An access control issue in Zammad v5.0.3 broadcasts administrative configuration changes to all users who have an active application instance, including settings that should only be visible to authenticated users.

Affected configurations

• zammad zammad (< 5.1.0)

Related

Weakness · CWE (1)

  • CWE-668 Exposure of Resource to Wrong Sphere weakness

References