Paper/Archive/CVE-2022-37042

CVE-2022-37042

Synacor Zimbra Collaboration Suite (ZCS) — Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability

KEV · due 1 Sep ransomware use EPSS 92%public exploit SSVC act CVSS 9.8

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 In CISA KEV+3030.0 EPSS percentile 99.8.998 × 2020.0 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication (i.e., not having an authtoken), an attacker can upload arbitrary files to the system, leading to directory traversal and remote code execution. NOTE: this issue exists because of an incomplete fix for CVE-2022-27925.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refwiki.zimbra.com/wiki/Zimbra_Security_Advisories refwiki.zimbra.com/wiki/Security_Center refpacketstormsecurity.com/files/168146/Zimbra-Zip-Path-Traversal.html refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-37042 kevcisa.gov/known-exploited-vulnerabilities-catalog