Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2022-27924
HistoryApr 21, 2022 - 12:15 a.m.

CVE-2022-27924

2022-04-2100:15:08
CWE-74
[email protected]
web.nvd.nist.gov
713
In Wild
2
cve-2022-27924
zimbra collaboration
zcs
unauthenticated attacker
memcache commands
cache overwrite
security vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.8 High

AI Score

Confidence

High

0.097 Low

EPSS

Percentile

94.8%

JSON

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an overwrite of arbitrary cached entries.

Affected configurations

NVD
Node
zimbracollaborationMatch8.8.15-
OR
zimbracollaborationMatch9.0.0-

Social References

More

Related

cisa_kev 1
nvd 1
osv 1
checkpoint_advisories 1
cnvd 1
thn 3
prion 1
cvelist 1
attackerkb 3
ics 3
nessus 1
rapid7blog 2
cisa_kev
cisa_kev
Zimbra Collaboration (ZCS) Command Injection Vulnerability
2022-08-04 00:00:00
nvd
nvd
CVE-2022-27924
2022-04-21 00:15:08
osv
osv
CVE-2022-27924
2022-04-21 00:15:08
checkpoint_advisories
checkpoint_advisories
Zimbra Collaboration CRLF Injection (CVE-2022-27924)
2022-07-20 00:00:00
cnvd
cnvd
Zimbra Access Control Error Vulnerability
2022-04-22 00:00:00
thn
thn
CISA Adds Zimbra Email Vulnerability to its Exploited Vulnerabilities Catalog
2022-08-05 05:54:00
New Zimbra Email Vulnerability Could Let Attackers Steal Your Login Credentials
2022-06-14 15:13:00
Researchers Warn of Ongoing Mass Exploitation of Zimbra RCE Vulnerability
2022-08-12 06:14:00
prion
prion
Design/Logic Flaw
2022-04-21 00:15:00
cvelist
cvelist
CVE-2022-27924
2022-04-20 23:23:17
attackerkb
attackerkb
CVE-2022-27924
2022-08-16 00:00:00
CVE-2022-27925
2022-04-21 00:00:00
CVE-2022-37393
2022-08-16 00:00:00
ics
ics
Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite
2023-01-27 12:00:00
NSA and CISA Red and Blue Teams Share Top Ten Cybersecurity Misconfigurations
2023-10-05 12:00:00
2022 Top Routinely Exploited Vulnerabilities
2023-08-03 12:00:00
nessus
nessus
Zimbra Collaboration Server 8.8.x < 8.8.15 Patch 31 / 9.0.0 < 9.0.0 Patch 24 Multiple Vulnerabilities
2022-07-13 00:00:00
rapid7blog
rapid7blog
Active Exploitation of Multiple Vulnerabilities in Zimbra Collaboration Suite
2022-08-17 12:55:18
What’s New in InsightVM and Nexpose: Q3 2022 in Review
2022-09-28 14:11:35

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.8 High

AI Score

Confidence

High

0.097 Low

EPSS

Percentile

94.8%

JSON
Related for CVE-2022-27924
cisa_kev1nvd1osv1checkpoint_advisories1cnvd1thn3prion1cvelist1attackerkb3ics3nessus1rapid7blog2