CVE-2017-5619
- Source
- https://cve.org/CVERecord?id=CVE-2017-5619
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5619.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2017-5619
- Published
- 2017-03-13T06:59:00Z
- Modified
- 2026-07-08T12:27:47Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attackers can login with the hashed password itself (e.g., from the DB) instead of the valid password string.
- References
Affected packages
Git / github.com/zammad/zammad
Affected ranges
- Type
- GIT
- Repo
- https://github.com/zammad/zammad
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroducedLast Affected
- Database specific
-
Show details
{ "cpe": [ "cpe:2.3:a:zammad:zammad:*:*:*:*:*:*:*:*", "cpe:2.3:a:zammad:zammad:1.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:zammad:zammad:1.1.1:*:*:*:*:*:*:*", "cpe:2.3:a:zammad:zammad:1.1.2:*:*:*:*:*:*:*", "cpe:2.3:a:zammad:zammad:1.2.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "0" }, { "last_affected": "1.0.3" }, { "introduced": "1.1.0" }, { "last_affected": "1.1.0" }, { "introduced": "1.1.1" }, { "last_affected": "1.1.1" }, { "introduced": "1.1.2" }, { "last_affected": "1.1.2" }, { "introduced": "1.2.0" }, { "last_affected": "1.2.0" } ], "source": [ "CPE_RANGE", "CPE_STRING" ] }