CVE-2021-44886

In Zammad 5.0.2, agents can configure "out of office" periods and substitute persons

published February 4, 2022

CVSS
—
EPSS
1%
Percentile
58.7
In the wild
Unconfirmed
What it is

In Zammad 5.0.2, agents can configure "out of office" periods and substitute persons. If the substitute persons didn't have the same permissions as the original agent, they could receive ticket notifications for tickets that they have no access to.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00881 · 58.7th percentile
Published
2022-02-04T14:21Z
EPSS history
Timeline
  • 04 FEB 14:21Z
    In Zammad 5.0.2, agents can configure "out of office" periods and substitute persons
    cvelistv5