PT-2020-17260
CVE-2020-35123
·
تاريخ النشر
2020-12-17
·
تاريخ التحديث
2020-12-22
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Zimbra Collaboration Suite Network Edition versions prior to 9.0.0 P10
Zimbra Collaboration Suite Network Edition versions prior to 8.8.15 P17
Description
The issue is related to an XXE vulnerability in the saml consumer store extension, making it vulnerable to XXE attacks.
Recommendations
For versions prior to 9.0.0 P10, update to Zimbra Collaboration Suite Network edition 9.0.0 Patch 10.
For versions prior to 8.8.15 P17, update to Zimbra Collaboration Suite Network edition 8.8.15 Patch 17.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾