Design/Logic Flaw

2013-09-2320:55:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.4%

JSON

Zimbra Collaboration Suite (ZCS) 6.0.16 and earlier allows man-in-the-middle attackers to obtain access by sniffing the network and replaying the ZM_AUTH_TOKEN token.

CPENameOperatorVersion
zimbra_collaboration_suiteeq6.0.0
zimbra_collaboration_suiteeq6.0.1
zimbra_collaboration_suiteeq6.0.2
zimbra_collaboration_suiteeq6.0.3
zimbra_collaboration_suiteeq6.0.4
zimbra_collaboration_suiteeq6.0.5
zimbra_collaboration_suiteeq6.0.6
zimbra_collaboration_suiteeq6.0.7
zimbra_collaboration_suiteeq6.0.8
zimbra_collaboration_suiteeq6.0.9

Name	Operator	Version
zimbra_collaboration_suite	eq	6.0.0
zimbra_collaboration_suite	eq	6.0.1
zimbra_collaboration_suite	eq	6.0.2
zimbra_collaboration_suite	eq	6.0.3
zimbra_collaboration_suite	eq	6.0.4
zimbra_collaboration_suite	eq	6.0.5
zimbra_collaboration_suite	eq	6.0.6
zimbra_collaboration_suite	eq	6.0.7
zimbra_collaboration_suite	eq	6.0.8
zimbra_collaboration_suite	eq	6.0.9