Vulnerability Details CVE-2017-5619
An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attackers can login with the hashed password itself (e.g., from the DB) instead of the valid password string.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.2%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2017-5619
-
cpe:2.3:a:zammad:zammad:1.0.0
-
cpe:2.3:a:zammad:zammad:1.0.1
-
cpe:2.3:a:zammad:zammad:1.0.2
-
cpe:2.3:a:zammad:zammad:1.0.3
-
cpe:2.3:a:zammad:zammad:1.1.0
-
cpe:2.3:a:zammad:zammad:1.1.1
-
cpe:2.3:a:zammad:zammad:1.1.2
-
cpe:2.3:a:zammad:zammad:1.2.0