Zammad Origin Validation Vulnerability in SSO Mechanism Allowing Untrusted Header Processing

A vulnerability exists in Zammad, a web-based open-source helpdesk and customer support system, in versions prior to 7.0.1 and 6.5.4. The issue arises because the Single Sign-On (SSO) mechanism did not properly verify whether the header came from a trusted SSO proxy or gateway before taking further action. This flaw has been addressed in versions 7.0.1 and 6.5.4.

Impact

The vulnerability allows for improper validation of SSO headers, which could lead to unauthorized actions being performed based on unverified SSO information.

Remediation

Users can update to Zammad versions 7.0.1 or 6.5.4 to address this vulnerability.