VULNERABILITY INTELLIGENCE

CVE-2022-27331

CVSS score4.3 MEDIUM
EPSS probability0.70%
CISA KEVNot currently listed
Published2022-04-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

An access control issue in Zammad v5.0.3 broadcasts administrative configuration changes to all users who have an active application instance, including settings that should only be visible to authenticated users.

Weakness classification

  • CWE-668: Exposure of Resource to Wrong Sphere

Primary references