CVE-2022-3569CWE-271

Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a local privilege escalation issue in versions 9.0.0 and prior…

High · published October 17, 2022

CVSS v3.1
7.8
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is

Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a local privilege escalation issue in versions 9.0.0 and prior, where the 'zimbra' user can effectively coerce postfix into running arbitrary commands as 'root'.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00771 · 55.2th percentile
Weakness
CWE-271 · Privilege Dropping / Lowering Errors
Published
2022-10-17T22:45Z
EPSS history
Timeline
  • 17 OCT 22:45Z
    Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a local privilege escalation issue in versions 9.0.0 and prior…
    cvelistv5