| Package | Affected versions | Patched versions |
|---|---|---|
| zimbra collaboration suite | = 8.6.0= 8.7.11= 8.8.8= 8.8.9≥ 8.7.0, < 8.7.11≥ 8.8.0, < 8.8.8 | 8.7.118.8.8 |
An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 before 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authentication requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free