Lucene search
PRIOn knowledge basePRION:CVE-2022-41347HistorySep 26, 2022 - 2:15 a.m.
Default configuration
2022-09-2602:15:00
PRIOn knowledge base
www.prio-n.com
4
zimbra collaboration
sudo configuration
nginx
user-defined configuration
nvd
arbitrary parameters
.so files
An issue was discovered in Zimbra Collaboration (ZCS) 8.8.x and 9.x (e.g., 8.8.15). The Sudo configuration permits the zimbra user to execute the NGINX binary as root with arbitrary parameters. As part of its intended functionality, NGINX can load a user-defined configuration file, which includes plugins in the form of .so files, which also execute as root.
| CPE | Name | Operator | Version |
|---|---|---|---|
| collaboration | eq | 9.0.0 | |
| collaboration | eq | 8.8.15 |
Related
cve
cve
CVE-2022-41347
2022-09-26 02:15:10
nvd
nvd
CVE-2022-41347
2022-09-26 02:15:10
osv
osv
CVE-2022-41347
2022-09-26 02:15:10
cvelist
cvelist
CVE-2022-41347
2022-09-26 01:29:48