CVE-2018-10951

2018-05-1001:29:05

Google

osv.dev

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

JSON

mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows zimbraSSLPrivateKey read access via a GetServer, GetAllServers, or GetAllActiveServers call in the Admin SOAP API.

CPENameOperatorVersion
zm-buildeq8.8.2
zm-buildeq8.8.6
zm-buildeq8.7.10
zm-buildeq8.8.7
zm-buildeq8.7.7
zm-buildeq8.8.0.beta1
zm-buildeq8.7.9
zm-buildeq8.8.0beta2
zm-buildeq8.7.11
zm-buildeq8.7.6

Name	Operator	Version
zm-build	eq	8.8.2
zm-build	eq	8.8.6
zm-build	eq	8.7.10
zm-build	eq	8.8.7
zm-build	eq	8.7.7
zm-build	eq	8.8.0.beta1
zm-build	eq	8.7.9
zm-build	eq	8.8.0beta2
zm-build	eq	8.7.11
zm-build	eq	8.7.6