← Back

CVE-2023-24032

nvd nist
Published: Jun 15, 2023Modified: Nov 21, 2024

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

In Zimbra Collaboration Suite through 9.0 and 8.8.15, an attacker (who has initial user access to a Zimbra server instance) can execute commands as root by passing one of JVM arguments, leading to local privilege escalation (LPE).

Affected (60)

Zimbra
1 product
Collaboration
Configuration A
60 vulnerable
Vulnerable SoftwareAffected Versions
Zimbra
Collaboration
Version 8.8.15
Collaboration
Version 8.8.15 p10
Collaboration
Version 8.8.15 p11
Collaboration
Version 8.8.15 p12
Collaboration
Version 8.8.15 p13
Collaboration
Version 8.8.15 p14
Collaboration
Version 8.8.15 p15
Collaboration
Version 8.8.15 p16
Collaboration
Version 8.8.15 p17
Collaboration
Version 8.8.15 p18
Collaboration
Version 8.8.15 p19
Collaboration
Version 8.8.15 p1
Collaboration
Version 8.8.15 p20
Collaboration
Version 8.8.15 p21
Collaboration
Version 8.8.15 p22
Collaboration
Version 8.8.15 p23
Collaboration
Version 8.8.15 p24
Collaboration
Version 8.8.15 p25
Collaboration
Version 8.8.15 p26
Collaboration
Version 8.8.15 p27
Collaboration
Version 8.8.15 p28
Collaboration
Version 8.8.15 p29
Collaboration
Version 8.8.15 p2
Collaboration
Version 8.8.15 p30
Collaboration
Version 8.8.15 p31
Collaboration
Version 8.8.15 p32
Collaboration
Version 8.8.15 p33
Collaboration
Version 8.8.15 p34
Collaboration
Version 8.8.15 p35
Collaboration
Version 8.8.15 p3
Collaboration
Version 8.8.15 p4
Collaboration
Version 8.8.15 p5
Collaboration
Version 8.8.15 p6
Collaboration
Version 8.8.15 p7
Collaboration
Version 8.8.15 p8
Collaboration
Version 8.8.15 p9
Collaboration
Version 9.0.0
Collaboration
Version 9.0.0 p0
Collaboration
Version 9.0.0 p10
Collaboration
Version 9.0.0 p11
Collaboration
Version 9.0.0 p12
Collaboration
Version 9.0.0 p13
Collaboration
Version 9.0.0 p14
Collaboration
Version 9.0.0 p15
Collaboration
Version 9.0.0 p19
Collaboration
Version 9.0.0 p1
Collaboration
Version 9.0.0 p23
Collaboration
Version 9.0.0 p25
Collaboration
Version 9.0.0 p26
Collaboration
Version 9.0.0 p27
Collaboration
Version 9.0.0 p2
Collaboration
Version 9.0.0 p33
Collaboration
Version 9.0.0 p3
Collaboration
Version 9.0.0 p4
Collaboration
Version 9.0.0 p5
Collaboration
Version 9.0.0 p6
Collaboration
Version 9.0.0 p7.1
Collaboration
Version 9.0.0 p7
Collaboration
Version 9.0.0 p8
Collaboration
Version 9.0.0 p9

Related CWEs

CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References (4)

Source: cve@mitre.org
PatchRelease Notes
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchRelease Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.