CyberRota Analysis
AI-GeneratedZammad versions prior to 7.1.2 are vulnerable to a flaw in the S/MIME email signature verification process, allowing attackers to exploit the system by using forged certificates that mimic trusted senders. This can lead to the delivery of deceptive emails marked as "validly signed," potentially compromising the integrity of communications and trust within the helpdesk environment. Organizations using Zammad should prioritize upgrading to version 7.1.2 to mitigate the risk of email spoofing and maintain secure operations.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when Zammad checks the digital signature on an incoming S/MIME-signed email, it does not verify that the signing certificate is genuinely trusted, it only checks whether a certificate with a matching name is already stored in the system. An attacker can create their own certificate using the name of a real, previously trusted sender and use it to send a forged email. Zammad will display that email with the same "validly signed" indicator as a genuine message from the real sender, even though the attacker never had access to that sender's actual certificate or private key. This issue is fixed in version 7.1.2.