CVE-2021-42087

EUVD-2021-29073
An issue was discovered in Zammad before 4.1.1. An admin can discover the application secret via the API.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.9 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
Affected Products (NVD)
VendorProductVersion
zammadzammad
𝑥
< 4.1.1
𝑥
= Vulnerable software versions
References
https://zammad.com/en/advisories/zaa-2021-15
https://zammad.com/en/advisories/zaa-2021-15