Security Advisory

CVE-2023-29867

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-05-02 00:00:00
Last updated 2025-01-30 16:37:41
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Zammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker could gain information about linked accounts of users involved in their tickets using the Zammad API.