CVE-2022-37393
Zimbra zmslapd arbitrary module load
Severity Score
7.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
3
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Zimbra's sudo configuration permits the zimbra user to execute the zmslapd binary as root with arbitrary parameters. As part of its intended functionality, zmslapd can load a user-defined configuration file, which includes plugins in the form of .so files, which also execute as root.
La configuración sudo de Zimbra permite al usuario zimbra ejecutar el binario zmslapd como root con parámetros arbitrarios. Como parte de su funcionalidad prevista, zmslapd puede cargar un archivo de configuración definido por el usuario, que incluye plugins en forma de archivos .so, que también son ejecutadas como root.
*Credits:
Darren Martyn discovered and disclosed this vulnerability
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-08-02 CVE Reserved
- 2022-08-10 CVE Published
- 2024-09-17 CVE Updated
- 2024-09-17 EPSS Updated
- 2024-09-17 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-284: Improper Access Control
CAPEC
References (3)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.7.6 Search vendor "Zimbra" for product "Collaboration" and version "8.7.6" | - |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.7.7 Search vendor "Zimbra" for product "Collaboration" and version "8.7.7" | - |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.7.9 Search vendor "Zimbra" for product "Collaboration" and version "8.7.9" | - |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.7.10 Search vendor "Zimbra" for product "Collaboration" and version "8.7.10" | - |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.7.11 Search vendor "Zimbra" for product "Collaboration" and version "8.7.11" | - |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.7.11 Search vendor "Zimbra" for product "Collaboration" and version "8.7.11" | p1 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.7.11 Search vendor "Zimbra" for product "Collaboration" and version "8.7.11" | p10 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.7.11 Search vendor "Zimbra" for product "Collaboration" and version "8.7.11" | p11 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.7.11 Search vendor "Zimbra" for product "Collaboration" and version "8.7.11" | p12 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.7.11 Search vendor "Zimbra" for product "Collaboration" and version "8.7.11" | p13 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.7.11 Search vendor "Zimbra" for product "Collaboration" and version "8.7.11" | p14 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.7.11 Search vendor "Zimbra" for product "Collaboration" and version "8.7.11" | p15 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.7.11 Search vendor "Zimbra" for product "Collaboration" and version "8.7.11" | p2 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.7.11 Search vendor "Zimbra" for product "Collaboration" and version "8.7.11" | p3 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.7.11 Search vendor "Zimbra" for product "Collaboration" and version "8.7.11" | p4 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.7.11 Search vendor "Zimbra" for product "Collaboration" and version "8.7.11" | p5 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.7.11 Search vendor "Zimbra" for product "Collaboration" and version "8.7.11" | p6 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.7.11 Search vendor "Zimbra" for product "Collaboration" and version "8.7.11" | p7 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.7.11 Search vendor "Zimbra" for product "Collaboration" and version "8.7.11" | p8 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.7.11 Search vendor "Zimbra" for product "Collaboration" and version "8.7.11" | p9 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.0 Search vendor "Zimbra" for product "Collaboration" and version "8.8.0" | beta1 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.2 Search vendor "Zimbra" for product "Collaboration" and version "8.8.2" | - |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.3 Search vendor "Zimbra" for product "Collaboration" and version "8.8.3" | - |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.4 Search vendor "Zimbra" for product "Collaboration" and version "8.8.4" | - |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.6 Search vendor "Zimbra" for product "Collaboration" and version "8.8.6" | - |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.7 Search vendor "Zimbra" for product "Collaboration" and version "8.8.7" | - |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.8 Search vendor "Zimbra" for product "Collaboration" and version "8.8.8" | - |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.8 Search vendor "Zimbra" for product "Collaboration" and version "8.8.8" | p1 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.8 Search vendor "Zimbra" for product "Collaboration" and version "8.8.8" | p3 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.8 Search vendor "Zimbra" for product "Collaboration" and version "8.8.8" | p4 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.8 Search vendor "Zimbra" for product "Collaboration" and version "8.8.8" | p7 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.9 Search vendor "Zimbra" for product "Collaboration" and version "8.8.9" | - |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.9 Search vendor "Zimbra" for product "Collaboration" and version "8.8.9" | p1 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.9 Search vendor "Zimbra" for product "Collaboration" and version "8.8.9" | p10 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.9 Search vendor "Zimbra" for product "Collaboration" and version "8.8.9" | p3 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.10 Search vendor "Zimbra" for product "Collaboration" and version "8.8.10" | - |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.10 Search vendor "Zimbra" for product "Collaboration" and version "8.8.10" | p8 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.11 Search vendor "Zimbra" for product "Collaboration" and version "8.8.11" | - |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.11 Search vendor "Zimbra" for product "Collaboration" and version "8.8.11" | p3 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.11 Search vendor "Zimbra" for product "Collaboration" and version "8.8.11" | p4 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.11 Search vendor "Zimbra" for product "Collaboration" and version "8.8.11" | p5 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.12 Search vendor "Zimbra" for product "Collaboration" and version "8.8.12" | - |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.12 Search vendor "Zimbra" for product "Collaboration" and version "8.8.12" | p3 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.12 Search vendor "Zimbra" for product "Collaboration" and version "8.8.12" | p4 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.15 Search vendor "Zimbra" for product "Collaboration" and version "8.8.15" | - |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.15 Search vendor "Zimbra" for product "Collaboration" and version "8.8.15" | p11 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.15 Search vendor "Zimbra" for product "Collaboration" and version "8.8.15" | p26 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.15 Search vendor "Zimbra" for product "Collaboration" and version "8.8.15" | p3 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.15 Search vendor "Zimbra" for product "Collaboration" and version "8.8.15" | p30 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.15 Search vendor "Zimbra" for product "Collaboration" and version "8.8.15" | p31 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.15 Search vendor "Zimbra" for product "Collaboration" and version "8.8.15" | p32 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.15 Search vendor "Zimbra" for product "Collaboration" and version "8.8.15" | p33 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.15 Search vendor "Zimbra" for product "Collaboration" and version "8.8.15" | p34 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 8.8.15 Search vendor "Zimbra" for product "Collaboration" and version "8.8.15" | p5 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 9.0.0 Search vendor "Zimbra" for product "Collaboration" and version "9.0.0" | p0 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 9.0.0 Search vendor "Zimbra" for product "Collaboration" and version "9.0.0" | p19 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 9.0.0 Search vendor "Zimbra" for product "Collaboration" and version "9.0.0" | p23 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 9.0.0 Search vendor "Zimbra" for product "Collaboration" and version "9.0.0" | p25 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 9.0.0 Search vendor "Zimbra" for product "Collaboration" and version "9.0.0" | p26 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 9.0.0 Search vendor "Zimbra" for product "Collaboration" and version "9.0.0" | p27 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 9.0.0 Search vendor "Zimbra" for product "Collaboration" and version "9.0.0" | p4 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 9.0.0 Search vendor "Zimbra" for product "Collaboration" and version "9.0.0" | p7 |
Affected
| ||||||
| Zimbra Search vendor "Zimbra" | Collaboration Search vendor "Zimbra" for product "Collaboration" | 9.0.0 Search vendor "Zimbra" for product "Collaboration" and version "9.0.0" | p7.1 |
Affected
| ||||||