Lucene search
PRIOn knowledge basePRION:CVE-2023-50454HistoryDec 10, 2023 - 7:15 p.m.
Design/Logic Flaw
2023-12-1019:15:00
PRIOn knowledge base
www.prio-n.com
3
zammad
ssl/tls
design flaw
man-in-the-middle
security issue
An issue was discovered in Zammad before 6.2.0. In several subsystems, SSL/TLS was used to establish connections to external services without proper validation of hostname and certificate authority. This is exploitable by man-in-the-middle attackers.
| CPE | Name | Operator | Version |
|---|---|---|---|
| zammad | eq | 6.1.0 alpha | |
| zammad | eq | 6.1.0 | |
| zammad | eq | 6.2.0 alpha |
References
Related
osv
osv
CVE-2023-50454
2023-12-10 19:15:07
cvelist
cvelist
CVE-2023-50454
2023-12-10 00:00:00
cnvd
cnvd
Zammad Trust Management Issues Vulnerabilities
2023-12-13 00:00:00
cve
cve
CVE-2023-50454
2023-12-10 19:15:07
nvd
nvd
CVE-2023-50454
2023-12-10 19:15:07