CVE-2022-27924—Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability

漏洞名称

Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability

描述

Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to inject memcache commands into a targeted instance which causes an overwrite of arbitrary cached entries.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply updates per vendor instructions.

其他说明

• https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24.1#Security_Fixes
• https://nvd.nist.gov/vuln/detail/CVE-2022-27924

相关新闻文章

• CISA Warns of Threat Actors Exploiting F5 BIG-IP Cookies for Network ReconnaissanceOctober 11, 2024
• US, UK warn of Russian APT29 hackers targeting Zimbra, TeamCity serversOctober 10, 2024

相关 CWE

• CWE-93