CVE-2018-10949

2018-05-1001:29:05

Google

osv.dev

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.4%

JSON

mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 allows Account Enumeration by leveraging a Discrepancy between the “HTTP 404 - account is not active” and “HTTP 401 - must authenticate” errors.

CPENameOperatorVersion
zm-buildeq8.8.2
zm-buildeq8.8.6
zm-buildeq8.7.10
zm-buildeq8.8.7
zm-buildeq8.7.7
zm-buildeq8.8.0.beta1
zm-buildeq8.7.9
zm-buildeq8.8.0beta2
zm-buildeq8.7.11
zm-buildeq8.7.6

Name	Operator	Version
zm-build	eq	8.8.2
zm-build	eq	8.8.6
zm-build	eq	8.7.10
zm-build	eq	8.8.7
zm-build	eq	8.7.7
zm-build	eq	8.8.0.beta1
zm-build	eq	8.7.9
zm-build	eq	8.8.0beta2
zm-build	eq	8.7.11
zm-build	eq	8.7.6