Weakness (CWE)
CWE-391: DEPRECATED: Unchecked Error Condition
Base Deprecated Mapping prohibited
This entry has been deprecated because it used
ambiguous terminology and incorporated and confused multiple
weaknesses. See Mapping Notes for other recommendations, and
see Maintenance Notes for more detailed
explanations.
Source: MITRE CWE-391
1 result · Clear filters · Feed
-
High 7.1
Zammad: PGP signature spoofing via unvalidated verification return
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary In Zammad's inbound PGP email processing, the return value of the gpg verification call was silently discarded. Regardless of whether gpg reported a valid, invalid, or…