| Package | Affected versions | Patched versions |
|---|---|---|
| collaboration | = 8.7.10= 8.7.11= 8.7.6= 8.7.7= 8.7.9= 8.8.0= 8.8.10= 8.8.11= 8.8.12= 8.8.15= 8.8.2= 8.8.3= 8.8.4= 8.8.6= 8.8.7= 8.8.8= 8.8.9= 9.0.0 |
Zimbra's sudo configuration permits the zimbra user to execute the zmslapd binary as root with arbitrary parameters. As part of its intended functionality, zmslapd can load a user-defined configuration file, which includes plugins in the form of .so files, which also execute as root.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free