PT-2020-17260
CVE-2020-35123
·
Published
2020-12-17
·
Updated
2020-12-22
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Zimbra Collaboration Suite Network Edition versions prior to 9.0.0 P10
Zimbra Collaboration Suite Network Edition versions prior to 8.8.15 P17
Description
The issue is related to an XXE vulnerability in the saml consumer store extension, making it vulnerable to XXE attacks.
Recommendations
For versions prior to 9.0.0 P10, update to Zimbra Collaboration Suite Network edition 9.0.0 Patch 10.
For versions prior to 8.8.15 P17, update to Zimbra Collaboration Suite Network edition 8.8.15 Patch 17.
Found an issue in the description? Have something to add? Feel free to write us 👾