high7.5
CVE-2021-35299
Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive information via email connection configuration probing.
Impact
Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive information via email connection configuration probing.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zammad | Zammad | from 1.0.0 through 4.0.0 |