Authentication Bypass in Zammad Affects User Sessions
CVE-2020-26030

9.8CRITICAL

Key Information:

Vendor

Zammad

Status
Zammad
Vendor
CVE Published:
28 December 2020

What is CVE-2020-26030?

A serious vulnerability exists in Zammad software versions prior to 3.4.1, allowing attackers to bypass authentication through a crafted header in the SSO endpoint when SSO is not properly configured. This flaw enables an attacker to establish a valid, authenticated session and execute actions on behalf of other users, potentially compromising user data and system integrity.

References

https://zammad.com/news/security-advisory-zaa-2020-18
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.