CVE-2022-40817

Zammad 5.2.1 has a fine-grained permission model that allows to configure read-only access to tickets

Medium · published September 27, 2022

CVSS v3.1
4.3
EPSS
0%
Percentile
41.5
In the wild
Unconfirmed
What it is

Zammad 5.2.1 has a fine-grained permission model that allows to configure read-only access to tickets. However, agents were still wrongly able to perform some operations on such tickets, like adding and removing links, tags. and related answers. This issue has been fixed in 5.2.2.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00494 · 41.5th percentile
Published
2022-09-27T15:24Z
EPSS history
Timeline
  • 27 SEP 15:24Z
    Zammad 5.2.1 has a fine-grained permission model that allows to configure read-only access to tickets
    cvelistv5