PT-2020-16267 · Zammad · Zammad

Dmitry Sobolev · Published 2020-12-28 · Updated 2020-12-29 · CVE-2020-26030

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 3.4.1

Description An issue was discovered in the SSO endpoint of Zammad, allowing an authentication bypass via a crafted header when SSO is not configured. This enables an attacker to create a valid and authenticated session, which can be used to perform actions in the name of other users.

Recommendations For versions prior to 3.4.1, update to version 3.4.1 or later to resolve the issue. As a temporary workaround, consider disabling the SSO endpoint until a patch is available. Restrict access to the SSO endpoint to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2020-26030

Affected Products

Zammad

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2020-26030 · Security Note
• https://zammad.com/news/security-advisory-zaa-2020-18 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-26030 · Vendor Advisory
• https://t.me/cibsecurity/21334 · Telegram Post
• https://t.me/cvenotify/7871 · Telegram Post
• https://t.me/cvenotify/7801 · Telegram Post