An issue was discovered in Zammad before 4.1.1. An admin can discover the application secret via the API.Referenceshttps://zammad.com/en/advisories/zaa-2021-15