8 matches found
EUVD-2025-203404
An issue was discovered in Zimbra Collaboration ZCS 10.0 and 10.1. A hardcoded Flickr API key and secret are present in the publicly accessible Flickr Zimlet used by Zimbra Collaboration. Because these credentials are embedded directly in the Zimlet, any unauthorized party could retrieve them and...
CVE-2025-67809
An issue was discovered in Zimbra Collaboration ZCS 10.0 and 10.1. A hardcoded Flickr API key and secret are present in the publicly accessible Flickr Zimlet used by Zimbra Collaboration. Because these credentials are embedded directly in the Zimlet, any unauthorized party could retrieve them and...
CVE-2025-67809
An issue was discovered in Zimbra Collaboration ZCS 10.0 and 10.1. A hardcoded Flickr API key and secret are present in the publicly accessible Flickr Zimlet used by Zimbra Collaboration. Because these credentials are embedded directly in the Zimlet, any unauthorized party could retrieve them and...
CVE-2025-67809
An issue was discovered in Zimbra Collaboration ZCS 10.0 and 10.1. A hardcoded Flickr API key and secret are present in the publicly accessible Flickr Zimlet used by Zimbra Collaboration. Because these credentials are embedded directly in the Zimlet, any unauthorized party could retrieve them and...
Zimbra Collaboration 安全漏洞
Zimbra Collaboration is an open source enterprise email and collaboration platform from Zimbra that supports email, calendar, document management and team collaboration features. A security vulnerability exists in Zimbra Collaboration versions 10.0 and 10.1, which stems from hard-coded API keys i...
CVE-2025-67809
A security vulnerability was identified in Zimbra Collaboration (ZCS) versions 10.0 and 10.1 due to hardcoded Flickr API keys and secrets within the publicly accessible Flickr Zimlet. An unauthorized party could retrieve these credentials to impersonate the legitimate application and initiate val...
PT-2025-51284
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions 10.0 and 10.1 Description A hardcoded Flickr API key and secret are present in the publicly accessible Flickr Zimlet used by Zimbra Collaboration. An attacker with access to these credentials could impersonate the...
CVE-2025-67809: Use of Hard-coded Credentials
An issue was discovered in Zimbra Collaboration ZCS 10.0 and 10.1. A hardcoded Flickr API key and secret are present in the publicly accessible Flickr Zimlet used by Zimbra Collaboration. Because these credentials are embedded directly in the Zimlet, any unauthorized party could retrieve them and...