CVE-2018-15131

2019-05-3016:29:00

Google

osv.dev

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.3%

JSON

An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 before 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authentication requests.

CPENameOperatorVersion
zm-buildeq8.7.6
zm-buildeq8.7.9
zm-buildeq8.7.10
zm-buildeq8.7.7

Name	Operator	Version
zm-build	eq	8.7.6
zm-build	eq	8.7.9
zm-build	eq	8.7.10
zm-build	eq	8.7.7

References

bugzilla.zimbra.com/show_bug.cgi?id=109012

wiki.zimbra.com/wiki/Zimbra_Security_Advisories