Zammad before 6.4.1 places sensitive data (such as auth_microsoft_office365_credentials and application_secret) in log files.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://zammad.com/en/advisories/zaa-2024-05 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
15 Apr 2025, 16:37
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Zammad
Zammad zammad |
|
| CPE | cpe:2.3:a:zammad:zammad:6.4.0:-:*:*:*:*:*:* cpe:2.3:a:zammad:zammad:6.4.0:alpha:*:*:*:*:*:* |
|
| References | () https://zammad.com/en/advisories/zaa-2024-05 - Vendor Advisory |
09 Dec 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-12-09 03:15
Updated : 2025-04-15 16:37
NVD link : CVE-2024-55578
Mitre link : CVE-2024-55578
JSON object : View
Products Affected
zammad
- zammad
CWE
No CWE.