← Back

Zm Mailbox

zm-mailbox

Vendor: Zimbra • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-10194
1Zimbra
1Zm Mailbox
Nov 21, 2024
Mar 20, 2020
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
cs/service/account/AutoCompleteGal.java in Zimbra zm-mailbox before 8.8.15.p8 allows authenticated users to request any GAL account. This differs from the intended behavior in which the domain of the authenticated user m...Show more
cs/service/account/AutoCompleteGal.java in Zimbra zm-mailbox before 8.8.15.p8 allows authenticated users to request any GAL account. This differs from the intended behavior in which the domain of the authenticated user must match the domain of the galsync account in the request.Show less