Security Advisory

CVE-2020-29158

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-12-28 07:56:06
Last updated 2024-08-04 16:48:01
Assigner mitre
State PUBLISHED

Description

An issue was discovered in Zammad before 3.5.1. An Agent with Customer permissions in a Group can bypass intended access control on internal Articles via the Ticket detail view.