Zammad before 6.4.1 places sensitive data (such as auth_microsoft_office365_credentials and application_secret) in log files.

参照URL

• advisory github.com
• advisory nvd.nist.gov
• advisory zammad.com