medium4.9
CVE-2020-29159
An issue was discovered in Zammad before 3.5.1.
Impact
An issue was discovered in Zammad before 3.5.1. The default signup Role (for newly created Users) can be a privileged Role, if configured by an admin. This behvaior was unintended.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zammad | Zammad | before 3.5.1 |