CVE-2023-29381

2023-07-0600:00:00

mitre

www.cve.org

zimbra collaboration

privilege escalation

sensitive information

remote attacker

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.4%

JSON

An issue in Zimbra Collaboration (ZCS) v.8.8.15 and v.9.0 allows a remote attacker to escalate privileges and obtain sensitive information via the password and 2FA parameters.

References

wiki.zimbra.com/wiki/Security_Center

wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy