PT-2022-3567
CVE-2022-27924
·
تاريخ النشر
2022-04-20
·
تاريخ التحديث
2026-10-01
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Zimbra Collaboration (aka ZCS) versions 8.8.15 through 9.0.0
Description
The issue allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance, causing an overwrite of arbitrary cached entries. This can be exploited to execute arbitrary commands and potentially steal user credentials. The vulnerability is being actively exploited.
Recommendations
For Zimbra Collaboration (aka ZCS) versions 8.8.15 through 9.0.0, update to version 8.8.15 P31.1 or 9.0.0 P24.1 to resolve the issue. As a temporary workaround, consider restricting access to memcache commands to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾