Exploit / PoChigh
A flaw in Zimbra email suite allows stealing login credentials of the users
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-27924 | Unauthenticated Memcache Command Injection in Synacor Zimbra Collaboration Suite | 7.5 | 94% | KEVRansomware | KEV |
From the original article
3 min read at securityaffairs.com
A high-severity vulnerability in the Zimbra email suite could be exploited by an unauthenticated attacker to steal login credentials of users. Researchers from Sonarsource have discovered a high-severity vulnerability impacting the Zimbra email suite, tracked as CVE-2022-27924 (CVSS score: 7. 5), that can be exploited by an unauthenticated attacker to steal login credentials of users without user interaction.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.