CVE-2022-27331

An access control issue in Zammad v5.0.3 broadcasts administrative configuration changes to all users who have an active application instance, including…

published April 27, 2022

CVSS
—
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

An access control issue in Zammad v5.0.3 broadcasts administrative configuration changes to all users who have an active application instance, including settings that should only be visible to authenticated users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00697 · 52.2th percentile
Published
2022-04-27T02:47Z
EPSS history
Timeline
  • 27 APR 02:47Z
    An access control issue in Zammad v5.0.3 broadcasts administrative configuration changes to all users who have an active application instance, including…
    cvelistv5