← Back

CVE-2023-29381

nvd nist
Published: Jul 6, 2023Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

An issue in Zimbra Collaboration (ZCS) v.8.8.15 and v.9.0 allows a remote attacker to escalate privileges and obtain sensitive information via the password and 2FA parameters.

Affected (66)

Zimbra
1 product
Collaboration
Configuration A
66 vulnerable
Vulnerable SoftwareAffected Versions
Zimbra
Collaboration
Version 8.8.15
Collaboration
Version 8.8.15 p10
Collaboration
Version 8.8.15 p11
Collaboration
Version 8.8.15 p12
Collaboration
Version 8.8.15 p13
Collaboration
Version 8.8.15 p14
Collaboration
Version 8.8.15 p15
Collaboration
Version 8.8.15 p16
Collaboration
Version 8.8.15 p17
Collaboration
Version 8.8.15 p18
Collaboration
Version 8.8.15 p19
Collaboration
Version 8.8.15 p1
Collaboration
Version 8.8.15 p20
Collaboration
Version 8.8.15 p21
Collaboration
Version 8.8.15 p22
Collaboration
Version 8.8.15 p23
Collaboration
Version 8.8.15 p24
Collaboration
Version 8.8.15 p25
Collaboration
Version 8.8.15 p26
Collaboration
Version 8.8.15 p27
Collaboration
Version 8.8.15 p28
Collaboration
Version 8.8.15 p29
Collaboration
Version 8.8.15 p2
Collaboration
Version 8.8.15 p30
Collaboration
Version 8.8.15 p31
Collaboration
Version 8.8.15 p32
Collaboration
Version 8.8.15 p33
Collaboration
Version 8.8.15 p34
Collaboration
Version 8.8.15 p35
Collaboration
Version 8.8.15 p37
Collaboration
Version 8.8.15 p3
Collaboration
Version 8.8.15 p4
Collaboration
Version 8.8.15 p5
Collaboration
Version 8.8.15 p6
Collaboration
Version 8.8.15 p7
Collaboration
Version 8.8.15 p8
Collaboration
Version 8.8.15 p9
Collaboration
Version 9.0.0
Collaboration
Version 9.0.0
Collaboration
Version 9.0.0 p0
Collaboration
Version 9.0.0 p10
Collaboration
Version 9.0.0 p11
Collaboration
Version 9.0.0 p12
Collaboration
Version 9.0.0 p13
Collaboration
Version 9.0.0 p14
Collaboration
Version 9.0.0 p15
Collaboration
Version 9.0.0 p16
Collaboration
Version 9.0.0 p19
Collaboration
Version 9.0.0 p1
Collaboration
Version 9.0.0 p20
Collaboration
Version 9.0.0 p21
Collaboration
Version 9.0.0 p23
Collaboration
Version 9.0.0 p24.1
Collaboration
Version 9.0.0 p24
Collaboration
Version 9.0.0 p25
Collaboration
Version 9.0.0 p26
Collaboration
Version 9.0.0 p27
Collaboration
Version 9.0.0 p2
Collaboration
Version 9.0.0 p3
Collaboration
Version 9.0.0 p4
Collaboration
Version 9.0.0 p5
Collaboration
Version 9.0.0 p6
Collaboration
Version 9.0.0 p7.1
Collaboration
Version 9.0.0 p7
Collaboration
Version 9.0.0 p8
Collaboration
Version 9.0.0 p9

Related CWEs

CWE-863
Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (4)

Source: cve@mitre.org
Release NotesVendor Advisory
Source: cve@mitre.org
Not Applicable
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable

Timeline

No history available yet.