[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAp2AP42UfJB2c2-8ga9jSySxRFY9oKSiJX9MHYalHRQ":3,"g5a-risk:CVE-2020-26030":104},{"success":4,"data":5,"meta":102},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":47,"references":48,"referencesCount":47,"weaknesses":54,"weaknessesCount":47,"isActivelyExploited":63,"cisaInfo":27,"otxData":27,"relatedBlogPosts":64,"seoMetadata":65,"configurations":90,"relatedVendorCves":100,"notableEvents":101},"CVE-2020-26030","What is CVE-2020-26030?","An issue was discovered in Zammad before 3.4.1. There is an authentication bypass in the SSO endpoint via a crafted header, when SSO is not configured. An attacker can create a valid and authenticated session that can be used to perform any actions in the name of other users.","An issue was discovered in Zammad before 3.4.1. There is an authentication bypass in the SSO endpoint via a crafted header, when SSO is not configured. An at...","2020-12-28T08:15:11.257","2020-12-29T14:31:44.663",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.0135,[39,39,39,39,39,39,39],"Critical",[43],{"vendor":44,"product":44,"version":45,"criteria":46,"vulnerable":4},"zammad","*","cpe:2.3:a:zammad:zammad:*:*:*:*:*:*:*:*",1,[49],{"url":50,"source":51,"tags":52},"https:\u002F\u002Fzammad.com\u002Fnews\u002Fsecurity-advisory-zaa-2020-18","Zammad",[53],"Vendor Advisory",[55],{"id":56,"name":57,"description":58,"extendedDescription":59,"status":60,"abstraction":61,"structure":62},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":66,"metaDescription":67,"keywords":68,"canonicalUrl":69,"structuredData":70},"What is CVE-2020-26030? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-26030, a critical severity cyber security vulnerability from 2020. An issue was discovered in Zammad before 3.4.1. There i...","CVE-2020-26030, CVE-2020-26030 vulnerability, CVE-2020-26030 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, zammad security, zammad vulnerability","\u002Fwhat-is\u002Fcve-2020-26030",{"@context":71,"@type":72,"headline":66,"description":67,"datePublished":10,"dateModified":11,"author":73,"publisher":77,"about":81,"mainEntityOfPage":85,"articleSection":88,"keywords":89},"https:\u002F\u002Fschema.org","TechArticle",{"@type":74,"name":75,"url":76},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":74,"name":75,"url":76,"logo":78},{"@type":79,"url":80},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":82,"name":6,"description":83,"additionalType":84},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":86,"@id":87},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-26030","Cybersecurity","CVE-2020-26030, CVE-2020-26030 vulnerability, CVE-2020-26030 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[91],{"Operator":27,"Negate":27,"Nodes":92},[93],{"Operator":94,"Negate":27,"CPEMatch":95},"OR",[96],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":97,"VersionStartExcluding":27,"VersionStartIncluding":98,"VersionEndExcluding":99,"VersionEndIncluding":27},"0DA96224-D95E-4967-A932-F42B7E93F83D","1.0.0","3.4.1",[],[],{"lastModified":11,"cacheTime":103,"version":33},1792348108923,{"score":105,"band":106,"action":107,"scoredAt":108},54,"Medium","Plan remediation","2026-10-16T06:50:06.86699+00:00"]