Zimbra Multiple Vulnerabilities

Multiple vulnerabilities were identified in Zimbra. A remote attacker could exploit some of these vulnerabilities to trigger cross-site scripting, spoofing, security restriction bypass and sensitive information disclosure on the targeted system.

Impact

• Security Restriction Bypass
• Spoofing
• Information Disclosure
• Cross-Site Scripting

System / Technologies affected

• Zimbra Daffodil prior to 10.0.18
• Zimbra Daffodil prior to 10.1.13

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

• https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.13#Security_Fixes
• https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.18#Security_Fixes

Source link