PT-2022-22865

CVE-2022-35489

·

Published

2022-08-08

·

Updated

2023-08-08

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Zammad version 5.2.0
Description The issue allows customers with secondary organizations assigned to view all organizations in the system, rather than only those they are assigned to.
Recommendations For Zammad version 5.2.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Researchers
Vendors
Affected products
Related identifiers
CVE-2022-35489
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com