CVE Catalog
CVE-2017-5619
CriticalSummary
An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1 that allows attackers to login using the hashed password instead of the valid password string.
Risk Assessment
The ability to log in using a hashed password poses a serious security risk, allowing unauthorized access to the system.
Recommendation
It is recommended to update Zammad to the latest version to mitigate this vulnerability and implement additional security measures.
Original NVD description (English source)
An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attackers can login with the hashed password itself (e.g., from the DB) instead of the valid password string.