CVE-2018-10950

Published: May 10, 2018Modified: Nov 21, 2024

5.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows Information Exposure through Verbose Error Messages containing a stack dump, tracing data, or full user-context dump.

Affected (16)

Products: Synacor: Zimbra Collaboration Suite

Synacor

1 product

Zimbra Collaboration Suite

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Synacor Zimbra Collaboration Suite	From 8.7.0 to 8.7.11
Synacor Zimbra Collaboration Suite	From 8.8.0 to 8.8.8
Synacor Zimbra Collaboration Suite	Version 8.6.0
Synacor Zimbra Collaboration Suite	Version 8.6.0 patch1
Synacor Zimbra Collaboration Suite	Version 8.6.0 patch2
Synacor Zimbra Collaboration Suite	Version 8.6.0 patch3
Synacor Zimbra Collaboration Suite	Version 8.6.0 patch4
Synacor Zimbra Collaboration Suite	Version 8.6.0 patch5
Synacor Zimbra Collaboration Suite	Version 8.6.0 patch6
Synacor Zimbra Collaboration Suite	Version 8.6.0 patch7
Synacor Zimbra Collaboration Suite	Version 8.6.0 patch8
Synacor Zimbra Collaboration Suite	Version 8.6.0 patch9
Synacor Zimbra Collaboration Suite	Version 8.7.11
Synacor Zimbra Collaboration Suite	Version 8.7.11 patch1
Synacor Zimbra Collaboration Suite	Version 8.7.11 patch2
Synacor Zimbra Collaboration Suite	Version 8.7.11 patch3

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://bugzilla.zimbra.com/show_bug.cgi?id=108963

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://bugzilla.zimbra.com/show_bug.cgi?id=108963

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

Timeline

No history available yet.