Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xxf4-wg2g-58ch

Опубликовано: 10 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

An issue was discovered in Zammad before 6.2.0. In several subsystems, SSL/TLS was used to establish connections to external services without proper validation of hostname and certificate authority. This is exploitable by man-in-the-middle attackers.

An issue was discovered in Zammad before 6.2.0. In several subsystems, SSL/TLS was used to establish connections to external services without proper validation of hostname and certificate authority. This is exploitable by man-in-the-middle attackers.

EPSS

Процентиль: 31%
0.00112
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 5.9
nvd
больше 1 года назад

An issue was discovered in Zammad before 6.2.0. In several subsystems, SSL/TLS was used to establish connections to external services without proper validation of hostname and certificate authority. This is exploitable by man-in-the-middle attackers.

CVSS3: 5.9
debian
больше 1 года назад

An issue was discovered in Zammad before 6.2.0. In several subsystems, ...

EPSS

Процентиль: 31%
0.00112
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-295