9.8

CVE-2024-45519

Warnung
Exploit
The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Synacor ≫ Zimbra Collaboration Suite Version < 8.8.15
Synacor ≫ Zimbra Collaboration Suite Version >= 10.0.0 < 10.0.9
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update -
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p1
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p10
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p11
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p12
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p13
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p14
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p15
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p16
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p17
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p18
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p19
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p2
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p20
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p21
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p22
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p23
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p24
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p25
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p26
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p27
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p28
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p29
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p3
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p30
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p31
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p31.1
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p32
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p33
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p34
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p35
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p36
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p37
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p38
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p39
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p4
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p40
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p41
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p42
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p43
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p44
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p45
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p5
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p6
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p7
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p8
Synacor ≫ Zimbra Collaboration Suite Version 8.8.15 Update p9
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update -
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p1
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p10
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p11
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p12
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p13
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p14
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p15
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p16
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p17
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p18
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p19
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p2
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p20
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p21
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p22
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p23
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p24
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p24.1
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p25
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p26
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p27
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p28
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p29
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p3
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p30
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p31
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p32
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p33
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p34
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p35
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p36
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p37
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p38
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p39
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p4
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p40
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p5
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p6
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p7
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p8
Synacor ≫ Zimbra Collaboration Suite Version 9.0.0 Update p9
Synacor ≫ Zimbra Collaboration Suite Version 10.1.0

03.10.2024: CISA Known Exploited Vulnerabilities (KEV) Catalog

Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

Schwachstelle

Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may allow an unauthenticated user to execute commands.

Beschreibung

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 99.91% 1
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
MITRE 10 3.9 6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

https://wiki.zimbra.com/wiki/Security_Center
Release Notes
https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy
Not Applicable
https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes
Release Notes
https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes
Release Notes
https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46#Security_Fixes
Release Notes
https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes
Release Notes
https://blog.projectdiscovery.io/zimbra-remote-code-execution/
Exploit
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-45519
US Government Resource