CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 102900 | CVE-2017-6080 | Candidate | An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, caused by lack of a protection mechanism involving HTTP Access-Control headers. To exploit the vulnerability, an attacker can send cross-domain requests directly to the REST API for users with a valid session cookie and receive the result. | Assigned (20170218) | None (candidate not yet proposed) | View | |
| 102901 | CVE-2017-6081 | Candidate | A CSRF issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. To exploit the vulnerability, an attacker can send cross-domain requests directly to the REST API for users with a valid session cookie. | Assigned (20170218) | None (candidate not yet proposed) | View | |
| 102902 | CVE-2017-6082 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20170218) | None (candidate not yet proposed) | View | |
| 102903 | CVE-2017-6083 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20170218) | None (candidate not yet proposed) | View | |
| 102904 | CVE-2017-6084 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20170218) | None (candidate not yet proposed) | View |
Page 980 of 20943, showing 5 records out of 104715 total, starting on record 4896, ending on 4900
