CVE-2020-26029

MEDIUM · CVSS 6.5 EPSS 0.78%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-12-28 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-26029

Severity

MEDIUM

CVSS

6.5

EPSS

0.78%

Original NVD Description

An issue was discovered in Zammad before 3.4.1. There are wrong authorization checks for impersonation requests via X-On-Behalf-Of. The authorization checks are performed for the actual user and not the one given in the X-On-Behalf-Of header.