CVE-2022-37042KEV ยท OVERDUECWE-22path-traversal

Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability

Critical ยท published August 12, 2022

Patch now

Confirmed exploited, and the score agrees

CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 99.8th percentile for exploit probability.

1514
days past CISA
deadline
CVSS v3.1
9.8
EPSS
92%
Percentile
99.8
In the wild
Confirmed
What it is

๐Ÿšจ An attacker can upload any file they want โ€” bypassing authentication entirely in Zimbra Collaboration Suite! ๐Ÿ”ฅ Think of it like a hotel lobby where anyone can drop off their bags without checking in. With no one verifying their identity, a malicious guest could leave a hidden surprise in someone else's room! This vulnerability could lead to disastrous consequences: attackers could execute their own code remotely, gain unauthorized access, and potentially compromise sensitive data. The fallout from such an attack can be absolutely devastating for organizations, putting both user data and reputations at risk.

Put simply

Think of it like a hotel lobby where anyone can drop off their bags without checking in. With no one verifying their identity, a malicious guest could leave a hidden surprise in someone else's room! CVE-2022-37042 arises from the mboximport functionality in ZCS versions 8.8.15 and 9.0, which allows file uploads without proper authentication checks. This flaw stems from an incomplete fix of a prior vulnerability, making it a critical security concern.

What to do

This vulnerability could lead to disastrous consequences: attackers could execute their own code remotely, gain unauthorized access, and potentially compromise sensitive data. The fallout from such an attack can be absolutely devastating for organizations, putting both user data and reputations at risk. Immediately patch to the latest version of Zimbra to address this vulnerability. Verify that authentication checks are correctly enforced, and consider conducting a thorough security audit to ensure no other vulnerabilities remain. ๐Ÿ”’ You've got this! By taking action now, you can secure your systems and protect your users. ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS v3.1
9.8 ยท CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.91893 ยท 99.8th percentile
Weakness
CWE-22 ยท Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2022-08-12T19:15Z
KEV added
2022-08-11 ยท due 2022-09-01
Affected products (61)
ProductVersionsFixed in
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
synacor/zimbra_collaboration_suiteall versionsโ€”
References (7)
EPSS history
Timeline
  • 11 AUG 19:37Z
    Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it
    cvelistv5
  • 11 AUG 00:00Z
    Added to CISA KEV โ€” remediate by Sep 1
    kev