Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS.
References
Link | Resource |
---|---|
https://bugzilla.zimbra.com/show_bug.cgi?id=96105 | Issue Tracking Permissions Required Vendor Advisory |
https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories | Vendor Advisory |
Configurations
History
No history.
Information
Published : 2020-01-27 19:15
Updated : 2024-02-04 20:39
NVD link : CVE-2014-8563
Mitre link : CVE-2014-8563
CVE.ORG link : CVE-2014-8563
JSON object : View
Products Affected
synacor
- zimbra_collaboration_server
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')