medium4.9
CVE-2020-26028
An issue was discovered in Zammad before 3.4.1.
Impact
An issue was discovered in Zammad before 3.4.1. Admin Users without a ticket.* permission can access Tickets.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zammad | Zammad | from 1.0.0 before 3.4.1 |