Vulnerabilities > CVE-2022-35489 - Unspecified vulnerability in Zammad 5.2.0

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
zammad

Summary

In Zammad 5.2.0, customers who have secondary organizations assigned were able to see all organizations of the system rather than only those to which they are assigned.

Vulnerable Configurations

Part Description Count
Application
Zammad
2