Vulnerabilities > CVE-2022-35490 - Improper Restriction of Excessive Authentication Attempts vulnerability in Zammad 5.2.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Zammad 5.2.0 is vulnerable to privilege escalation. Zammad has a prevention against brute-force attacks trying to guess login credentials. After a configurable amount of attempts, users are invalidated and logins prevented. An attacker might work around this prevention, enabling them to send more than the configured amount of requests before the user invalidation takes place.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |