{ "affected": [ { "ranges": [ { "database_specific": { "cpe": [ "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p1:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p19:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p20:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p23:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p25:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p26:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p4:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p7:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:-:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p1:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p11:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p20:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p26:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p3:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p30:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p31:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p32:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p33:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p5:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "9.0.0-NA" }, { "last_affected": "9.0.0-NA" }, { "introduced": "9.0.0-p1" }, { "last_affected": "9.0.0-p1" }, { "introduced": "9.0.0-p19" }, { "last_affected": "9.0.0-p19" }, { "introduced": "9.0.0-p20" }, { "last_affected": "9.0.0-p20" }, { "introduced": "9.0.0-p23" }, { "last_affected": "9.0.0-p23" }, { "introduced": "9.0.0-p25" }, { "last_affected": "9.0.0-p25" }, { "introduced": "9.0.0-p26" }, { "last_affected": "9.0.0-p26" }, { "introduced": "9.0.0-p4" }, { "last_affected": "9.0.0-p4" }, { "introduced": "9.0.0-p7" }, { "last_affected": "9.0.0-p7" }, { "introduced": "8.8.15-NA" }, { "last_affected": "8.8.15-NA" }, { "introduced": "8.8.15-p1" }, { "last_affected": "8.8.15-p1" }, { "introduced": "8.8.15-p11" }, { "last_affected": "8.8.15-p11" }, { "introduced": "8.8.15-p20" }, { "last_affected": "8.8.15-p20" }, { "introduced": "8.8.15-p26" }, { "last_affected": "8.8.15-p26" }, { "introduced": "8.8.15-p3" }, { "last_affected": "8.8.15-p3" }, { "introduced": "8.8.15-p30" }, { "last_affected": "8.8.15-p30" }, { "introduced": "8.8.15-p31" }, { "last_affected": "8.8.15-p31" }, { "introduced": "8.8.15-p32" }, { "last_affected": "8.8.15-p32" }, { "introduced": "8.8.15-p33" }, { "last_affected": "8.8.15-p33" }, { "introduced": "8.8.15-p5" }, { "last_affected": "8.8.15-p5" } ], "source": "CPE_STRING" }, "events": [ { "introduced": "b6cd8f69d2761c014d4a3807f0bdee0011386444" }, { "last_affected": "0e40da921adb967639011de45841cef4c4601413" } ], "repo": "https://github.com/zimbra/zm-build", "type": "GIT" } ], "versions": [ "8.8.15-NA", "8.8.15-p1", "8.8.15-p20", "8.8.15-p26", "8.8.15-p3", "8.8.15-p30", "8.8.15-p31", "8.8.15-p32", "8.8.15-p33", "8.8.15-p5", "9.0.0-NA", "9.0.0-p1", "9.0.0-p20", "9.0.0-p23", "9.0.0-p25", "9.0.0-p26", "9.0.0-p4", "9.0.0-p7" ] }, { "ranges": [ { "database_specific": { "cpe": [ "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p1:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p10:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p11:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p13:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p14:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p16:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p17:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p18:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p19:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p2:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p20:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p22:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p23:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p24:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p24.1:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p25:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p26:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p3:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p4:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p5:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p6:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p7:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p8:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p9:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:-:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p1:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p10:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p11:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p12:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p13:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p14:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p15:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p16:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p17:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p18:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p2:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p20:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p23:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p24:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p25:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p26:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p27:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p29:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p3:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p30:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p31:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p31.1:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p32:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p33:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p4:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p5:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p6:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p7:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p8:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p9:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "9.0.0-NA" }, { "last_affected": "9.0.0-NA" }, { "introduced": "9.0.0-p1" }, { "last_affected": "9.0.0-p1" }, { "introduced": "9.0.0-p10" }, { "last_affected": "9.0.0-p10" }, { "introduced": "9.0.0-p11" }, { "last_affected": "9.0.0-p11" }, { "introduced": "9.0.0-p13" }, { "last_affected": "9.0.0-p13" }, { "introduced": "9.0.0-p14" }, { "last_affected": "9.0.0-p14" }, { "introduced": "9.0.0-p16" }, { "last_affected": "9.0.0-p16" }, { "introduced": "9.0.0-p17" }, { "last_affected": "9.0.0-p17" }, { "introduced": "9.0.0-p18" }, { "last_affected": "9.0.0-p18" }, { "introduced": "9.0.0-p19" }, { "last_affected": "9.0.0-p19" }, { "introduced": "9.0.0-p2" }, { "last_affected": "9.0.0-p2" }, { "introduced": "9.0.0-p20" }, { "last_affected": "9.0.0-p20" }, { "introduced": "9.0.0-p22" }, { "last_affected": "9.0.0-p22" }, { "introduced": "9.0.0-p23" }, { "last_affected": "9.0.0-p23" }, { "introduced": "9.0.0-p24" }, { "last_affected": "9.0.0-p24" }, { "introduced": "9.0.0-p24\\.1" }, { "last_affected": "9.0.0-p24\\.1" }, { "introduced": "9.0.0-p25" }, { "last_affected": "9.0.0-p25" }, { "introduced": "9.0.0-p26" }, { "last_affected": "9.0.0-p26" }, { "introduced": "9.0.0-p3" }, { "last_affected": "9.0.0-p3" }, { "introduced": "9.0.0-p4" }, { "last_affected": "9.0.0-p4" }, { "introduced": "9.0.0-p5" }, { "last_affected": "9.0.0-p5" }, { "introduced": "9.0.0-p6" }, { "last_affected": "9.0.0-p6" }, { "introduced": "9.0.0-p7" }, { "last_affected": "9.0.0-p7" }, { "introduced": "9.0.0-p8" }, { "last_affected": "9.0.0-p8" }, { "introduced": "9.0.0-p9" }, { "last_affected": "9.0.0-p9" }, { "introduced": "8.8.15-NA" }, { "last_affected": "8.8.15-NA" }, { "introduced": "8.8.15-p1" }, { "last_affected": "8.8.15-p1" }, { "introduced": "8.8.15-p10" }, { "last_affected": "8.8.15-p10" }, { "introduced": "8.8.15-p11" }, { "last_affected": "8.8.15-p11" }, { "introduced": "8.8.15-p12" }, { "last_affected": "8.8.15-p12" }, { "introduced": "8.8.15-p13" }, { "last_affected": "8.8.15-p13" }, { "introduced": "8.8.15-p14" }, { "last_affected": "8.8.15-p14" }, { "introduced": "8.8.15-p15" }, { "last_affected": "8.8.15-p15" }, { "introduced": "8.8.15-p16" }, { "last_affected": "8.8.15-p16" }, { "introduced": "8.8.15-p17" }, { "last_affected": "8.8.15-p17" }, { "introduced": "8.8.15-p18" }, { "last_affected": "8.8.15-p18" }, { "introduced": "8.8.15-p2" }, { "last_affected": "8.8.15-p2" }, { "introduced": "8.8.15-p20" }, { "last_affected": "8.8.15-p20" }, { "introduced": "8.8.15-p23" }, { "last_affected": "8.8.15-p23" }, { "introduced": "8.8.15-p24" }, { "last_affected": "8.8.15-p24" }, { "introduced": "8.8.15-p25" }, { "last_affected": "8.8.15-p25" }, { "introduced": "8.8.15-p26" }, { "last_affected": "8.8.15-p26" }, { "introduced": "8.8.15-p27" }, { "last_affected": "8.8.15-p27" }, { "introduced": "8.8.15-p29" }, { "last_affected": "8.8.15-p29" }, { "introduced": "8.8.15-p3" }, { "last_affected": "8.8.15-p3" }, { "introduced": "8.8.15-p30" }, { "last_affected": "8.8.15-p30" }, { "introduced": "8.8.15-p31" }, { "last_affected": "8.8.15-p31" }, { "introduced": "8.8.15-p31\\.1" }, { "last_affected": "8.8.15-p31\\.1" }, { "introduced": "8.8.15-p32" }, { "last_affected": "8.8.15-p32" }, { "introduced": "8.8.15-p33" }, { "last_affected": "8.8.15-p33" }, { "introduced": "8.8.15-p4" }, { "last_affected": "8.8.15-p4" }, { "introduced": "8.8.15-p5" }, { "last_affected": "8.8.15-p5" }, { "introduced": "8.8.15-p6" }, { "last_affected": "8.8.15-p6" }, { "introduced": "8.8.15-p7" }, { "last_affected": "8.8.15-p7" }, { "introduced": "8.8.15-p8" }, { "last_affected": "8.8.15-p8" }, { "introduced": "8.8.15-p9" }, { "last_affected": "8.8.15-p9" } ], "source": "CPE_STRING" }, "events": [ { "introduced": "2ec276e0cd140c34d2e8aa6e2260a10901e43a9d" }, { "last_affected": "d31ba9d45eb31100ea30461dd859a5a9663b1e4a" } ], "repo": "https://github.com/zimbra/zm-mailbox", "type": "GIT" } ], "versions": [ "8.8.15-NA", "8.8.15-p1", "8.8.15-p10", "8.8.15-p11", "8.8.15-p12", "8.8.15-p13", "8.8.15-p14", "8.8.15-p15", "8.8.15-p16", "8.8.15-p17", "8.8.15-p18", "8.8.15-p2", "8.8.15-p20", "8.8.15-p23", "8.8.15-p24", "8.8.15-p25", "8.8.15-p26", "8.8.15-p27", "8.8.15-p29", "8.8.15-p3", "8.8.15-p30", "8.8.15-p31", "8.8.15-p31\\.1", "8.8.15-p32", "8.8.15-p33", "8.8.15-p4", "8.8.15-p5", "8.8.15-p6", "8.8.15-p7", "8.8.15-p8", "8.8.15-p9", "9.0.0-NA", "9.0.0-p1", "9.0.0-p10", "9.0.0-p11", "9.0.0-p13", "9.0.0-p16", "9.0.0-p17", "9.0.0-p18", "9.0.0-p19", "9.0.0-p2", "9.0.0-p20", "9.0.0-p22", "9.0.0-p23", "9.0.0-p24", "9.0.0-p24\\.1", "9.0.0-p25", "9.0.0-p26", "9.0.0-p3", "9.0.0-p4", "9.0.0-p5", "9.0.0-p6", "9.0.0-p7", "9.0.0-p8", "9.0.0-p9" ] }, { "ranges": [ { "database_specific": { "cpe": [ "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p25:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p26:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:-:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p32:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p33:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p6:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "9.0.0-NA" }, { "last_affected": "9.0.0-NA" }, { "introduced": "9.0.0-p25" }, { "last_affected": "9.0.0-p25" }, { "introduced": "9.0.0-p26" }, { "last_affected": "9.0.0-p26" }, { "introduced": "8.8.15-NA" }, { "last_affected": "8.8.15-NA" }, { "introduced": "8.8.15-p32" }, { "last_affected": "8.8.15-p32" }, { "introduced": "8.8.15-p33" }, { "last_affected": "8.8.15-p33" }, { "introduced": "8.8.15-p6" }, { "last_affected": "8.8.15-p6" } ], "source": "CPE_STRING" }, "events": [ { "introduced": "7cf503e14f689f39bad171475fb4e151bfcc22ee" }, { "last_affected": "23aed22cd8a74171216c22f113baf1c7516065a5" } ], "repo": "https://github.com/zimbra/zm-zcs", "type": "GIT" } ], "versions": [ "8.8.15-NA", "8.8.15-p32", "8.8.15-p33", "8.8.15-p6", "9.0.0-NA", "9.0.0-p25", "9.0.0-p26" ] }, { "ranges": [ { "database_specific": { "cpe": [ "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:-:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p13:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p14:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p16:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p17:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p23:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p24:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p25:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p3:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0:p4:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:-:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p20:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p21:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p23:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p24:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p3:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p30:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p31:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p32:*:*:*:*:*:*", "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p5:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "9.0.0-NA" }, { "last_affected": "9.0.0-NA" }, { "introduced": "9.0.0-p13" }, { "last_affected": "9.0.0-p13" }, { "introduced": "9.0.0-p14" }, { "last_affected": "9.0.0-p14" }, { "introduced": "9.0.0-p16" }, { "last_affected": "9.0.0-p16" }, { "introduced": "9.0.0-p17" }, { "last_affected": "9.0.0-p17" }, { "introduced": "9.0.0-p23" }, { "last_affected": "9.0.0-p23" }, { "introduced": "9.0.0-p24" }, { "last_affected": "9.0.0-p24" }, { "introduced": "9.0.0-p25" }, { "last_affected": "9.0.0-p25" }, { "introduced": "9.0.0-p3" }, { "last_affected": "9.0.0-p3" }, { "introduced": "9.0.0-p4" }, { "last_affected": "9.0.0-p4" }, { "introduced": "8.8.15-NA" }, { "last_affected": "8.8.15-NA" }, { "introduced": "8.8.15-p20" }, { "last_affected": "8.8.15-p20" }, { "introduced": "8.8.15-p21" }, { "last_affected": "8.8.15-p21" }, { "introduced": "8.8.15-p23" }, { "last_affected": "8.8.15-p23" }, { "introduced": "8.8.15-p24" }, { "last_affected": "8.8.15-p24" }, { "introduced": "8.8.15-p3" }, { "last_affected": "8.8.15-p3" }, { "introduced": "8.8.15-p30" }, { "last_affected": "8.8.15-p30" }, { "introduced": "8.8.15-p31" }, { "last_affected": "8.8.15-p31" }, { "introduced": "8.8.15-p32" }, { "last_affected": "8.8.15-p32" }, { "introduced": "8.8.15-p5" }, { "last_affected": "8.8.15-p5" } ], "source": "CPE_STRING" }, "events": [ { "introduced": "08274721e99c2522952c640cd42e4d0cf676d432" }, { "last_affected": "0ab6066136702c847b75ff6928cf5e7af37adb6f" } ], "repo": "https://github.com/zimbra/zm-zcs-lib", "type": "GIT" } ], "versions": [ "8.8.15-NA", "8.8.15-p20", "8.8.15-p21", "8.8.15-p23", "8.8.15-p24", "8.8.15-p3", "8.8.15-p30", "8.8.15-p31", "8.8.15-p32", "8.8.15-p5", "9.0.0-NA", "9.0.0-p13", "9.0.0-p14", "9.0.0-p16", "9.0.0-p17", "9.0.0-p23", "9.0.0-p24", "9.0.0-p25", "9.0.0-p3", "9.0.0-p4" ] } ], "database_specific": { "cna_assigner": "mitre", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41352.json" }, "details": "An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole (extraction to /opt/zimbra/jetty/webapps/zimbra/public) that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also, pax is in the prerequisites of Zimbra on Ubuntu; however, pax is no longer part of a default Red Hat installation after RHEL 6 (or CentOS 6). Once pax is installed, amavis automatically prefers it over cpio.", "id": "CVE-2022-41352", "modified": "2026-07-15T01:49:06.259586474Z", "published": "2022-09-26T00:00:00Z", "references": [ { "type": "WEB", "url": "http://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.html" }, { "type": "WEB", "url": "https://forums.zimbra.org/viewtopic.php?t=71153\u0026p=306532" }, { "type": "WEB", "url": "https://wiki.zimbra.com/wiki/Security_Center" }, { "type": "WEB", "url": "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories" }, { "type": "WEB", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41352" }, { "type": "ADVISORY", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41352.json" }, { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41352" }, { "type": "ARTICLE", "url": "https://www.secpod.com/blog/unpatched-rce-bug-in-zimbra-collaboration-suite-exploited-in-wild/" } ], "schema_version": "1.8.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "type": "CVSS_V3" } ] }