Authentication flaw

2020-12-2808:15:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.6%

JSON

An issue was discovered in Zammad before 3.4.1. There is an authentication bypass in the SSO endpoint via a crafted header, when SSO is not configured. An attacker can create a valid and authenticated session that can be used to perform any actions in the name of other users.

CPENameOperatorVersion
zammadge1.0.0
zammadlt3.4.1

CPE	Name	Operator	Version
	zammad	ge	1.0.0
	zammad	lt	3.4.1

References

zammad.com/news/security-advisory-zaa-2020-18