CVE-2022-27332

Name of the Vulnerable Software and Affected Versions Zammad version 5.0.3

Description An access control issue allows attackers to write entries to the CTI caller log without authentication. This can enable attackers to execute phishing attacks or cause a Denial of Service (DoS).

Recommendations For Zammad version 5.0.3, consider restricting access to the CTI caller log until a patch is available to prevent unauthorized writing of entries. As a temporary workaround, monitor the CTI caller log closely for suspicious activity to minimize the risk of exploitation.