Lucene search

[email protected]NVD:CVE-2021-35209

HistoryJul 02, 2021 - 7:15 p.m.

CVE-2021-35209

2021-07-0219:15:08

CWE-918

[email protected]

web.nvd.nist.gov

zimbra collaboration suite

proxyservlet.java

x-host header

host header

proxied requests

whitelist of hosts

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.007

Percentile

80.8%

JSON

An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch 23 and 9.x before 9.0.0 Patch 16. The value of the X-Host header overwrites the value of the Host header in proxied requests. The value of X-Host header is not checked against the whitelist of hosts Zimbra is allowed to proxy to (the zimbraProxyAllowedDomains setting).

Affected configurations

Nvd

Node

zimbracollaborationRange8.8–8.8.15

zimbracollaborationMatch8.8.15-

zimbracollaborationMatch8.8.15p1

zimbracollaborationMatch8.8.15p10

zimbracollaborationMatch8.8.15p11

zimbracollaborationMatch8.8.15p12

zimbracollaborationMatch8.8.15p13

zimbracollaborationMatch8.8.15p14

zimbracollaborationMatch8.8.15p15

zimbracollaborationMatch8.8.15p16

zimbracollaborationMatch8.8.15p17

zimbracollaborationMatch8.8.15p18

zimbracollaborationMatch8.8.15p19

zimbracollaborationMatch8.8.15p2

zimbracollaborationMatch8.8.15p3

zimbracollaborationMatch8.8.15p4

zimbracollaborationMatch8.8.15p5

zimbracollaborationMatch8.8.15p6

zimbracollaborationMatch8.8.15p7

zimbracollaborationMatch8.8.15p8

zimbracollaborationMatch8.8.15p9

zimbracollaborationMatch9.0.0-

zimbracollaborationMatch9.0.0p1

zimbracollaborationMatch9.0.0p10

zimbracollaborationMatch9.0.0p11

zimbracollaborationMatch9.0.0p12

zimbracollaborationMatch9.0.0p2

zimbracollaborationMatch9.0.0p3

zimbracollaborationMatch9.0.0p4

zimbracollaborationMatch9.0.0p5

zimbracollaborationMatch9.0.0p6

zimbracollaborationMatch9.0.0p7

zimbracollaborationMatch9.0.0p8

zimbracollaborationMatch9.0.0p9

VendorProductVersionCPE
zimbracollaboration*cpe:2.3:a:zimbra:collaboration:*:*:*:*:*:*:*:*
zimbracollaboration8.8.15cpe:2.3:a:zimbra:collaboration:8.8.15:-:*:*:*:*:*:*
zimbracollaboration8.8.15cpe:2.3:a:zimbra:collaboration:8.8.15:p1:*:*:*:*:*:*
zimbracollaboration8.8.15cpe:2.3:a:zimbra:collaboration:8.8.15:p10:*:*:*:*:*:*
zimbracollaboration8.8.15cpe:2.3:a:zimbra:collaboration:8.8.15:p11:*:*:*:*:*:*
zimbracollaboration8.8.15cpe:2.3:a:zimbra:collaboration:8.8.15:p12:*:*:*:*:*:*
zimbracollaboration8.8.15cpe:2.3:a:zimbra:collaboration:8.8.15:p13:*:*:*:*:*:*
zimbracollaboration8.8.15cpe:2.3:a:zimbra:collaboration:8.8.15:p14:*:*:*:*:*:*
zimbracollaboration8.8.15cpe:2.3:a:zimbra:collaboration:8.8.15:p15:*:*:*:*:*:*
zimbracollaboration8.8.15cpe:2.3:a:zimbra:collaboration:8.8.15:p16:*:*:*:*:*:*

Vendor	Product	Version	CPE
zimbra	collaboration	*	cpe:2.3:a:zimbra:collaboration::::::::
zimbra	collaboration	8.8.15	cpe:2.3:a:zimbra:collaboration:8.8.15:-::::::
zimbra	collaboration	8.8.15	cpe:2.3:a:zimbra:collaboration:8.8.15:p1::::::
zimbra	collaboration	8.8.15	cpe:2.3:a:zimbra:collaboration:8.8.15:p10::::::
zimbra	collaboration	8.8.15	cpe:2.3:a:zimbra:collaboration:8.8.15:p11::::::
zimbra	collaboration	8.8.15	cpe:2.3:a:zimbra:collaboration:8.8.15:p12::::::
zimbra	collaboration	8.8.15	cpe:2.3:a:zimbra:collaboration:8.8.15:p13::::::
zimbra	collaboration	8.8.15	cpe:2.3:a:zimbra:collaboration:8.8.15:p14::::::
zimbra	collaboration	8.8.15	cpe:2.3:a:zimbra:collaboration:8.8.15:p15::::::
zimbra	collaboration	8.8.15	cpe:2.3:a:zimbra:collaboration:8.8.15:p16::::::