Zimbra bug causes alarm among researchers, CERTs after exploitation attempts
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-45519 | Unauthenticated Command Execution in Synacor Zimbra Collaboration Suite (ZCS) | 9.8 | 100% | KEVPoC | KEV |
From the original article
1 min read at therecord.media
Multiple cybersecurity agencies in Europe warned about a vulnerability affecting Zimbra’s email product that researchers have confirmed is being exploited to spread malware. Researchers at email security company Proofpoint said they began to see exploitation of the bug, tracked as CVE-2024-45519, on September 28. Zimbra has released a patch, but several other experts said they are seeing mass targeting of the bug.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.