Security Advisory

CVE-2024-49193

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-10-12 00:00:00

Last updated 2024-10-16 20:06:28

Assigner mitre

State PUBLISHED

Description

Zendesk before 2024-07-02 allows remote attackers to read ticket history via e-mail spoofing, because Cc fields are extracted from incoming e-mail messages and used to grant additional authorization for ticket viewing, the mechanism for detecting spoofed e-mail messages is insufficient, and the support e-mail addresses associated with individual tickets are predictable.

← Browse all CVEs View on cve.org ↗