Zimbra Collaboration (ZCS) Arbitrary File Upload Vulnerability

Description

Zimbra Collaboration (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any other user accounts.

Required Action

Apply updates per vendor instructions.

References

• https://wiki.zimbra.com/wiki/Security_Center
• https://nvd.nist.gov/vuln/detail/CVE-2022-41352

Additional Information

Catalog Version

2025.01.24

Catalog Released

Jan. 24, 2025

Days Until Due

0 days

Last Updated

8 months, 1 week ago