An issue in Zimbra Collaboration (ZCS) v.8.8.15 and v.9.0 allows a remote attacker to escalate privileges and obtain sensitive information via the password and 2FA parameters.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/29xxx/CVE-2023-29381.json",
"cna_assigner": "mitre"
}{
"cpe": [
"cpe:2.3:a:zimbra:collaboration:8.8.15:-:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p1:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p11:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p20:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p26:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p3:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p30:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p31:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p32:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p33:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p34:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p35:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p5:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:-:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p0:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p1:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p19:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p20:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p23:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p25:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p26:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p27:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p4:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p7:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p7.1:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.8.15-NA"
},
{
"last_affected": "8.8.15-NA"
},
{
"introduced": "8.8.15-p1"
},
{
"last_affected": "8.8.15-p1"
},
{
"introduced": "8.8.15-p11"
},
{
"last_affected": "8.8.15-p11"
},
{
"introduced": "8.8.15-p20"
},
{
"last_affected": "8.8.15-p20"
},
{
"introduced": "8.8.15-p26"
},
{
"last_affected": "8.8.15-p26"
},
{
"introduced": "8.8.15-p3"
},
{
"last_affected": "8.8.15-p3"
},
{
"introduced": "8.8.15-p30"
},
{
"last_affected": "8.8.15-p30"
},
{
"introduced": "8.8.15-p31"
},
{
"last_affected": "8.8.15-p31"
},
{
"introduced": "8.8.15-p32"
},
{
"last_affected": "8.8.15-p32"
},
{
"introduced": "8.8.15-p33"
},
{
"last_affected": "8.8.15-p33"
},
{
"introduced": "8.8.15-p34"
},
{
"last_affected": "8.8.15-p34"
},
{
"introduced": "8.8.15-p35"
},
{
"last_affected": "8.8.15-p35"
},
{
"introduced": "8.8.15-p5"
},
{
"last_affected": "8.8.15-p5"
},
{
"introduced": "9.0.0"
},
{
"last_affected": "9.0.0"
},
{
"introduced": "9.0.0-NA"
},
{
"last_affected": "9.0.0-NA"
},
{
"introduced": "9.0.0-p0"
},
{
"last_affected": "9.0.0-p0"
},
{
"introduced": "9.0.0-p1"
},
{
"last_affected": "9.0.0-p1"
},
{
"introduced": "9.0.0-p19"
},
{
"last_affected": "9.0.0-p19"
},
{
"introduced": "9.0.0-p20"
},
{
"last_affected": "9.0.0-p20"
},
{
"introduced": "9.0.0-p23"
},
{
"last_affected": "9.0.0-p23"
},
{
"introduced": "9.0.0-p25"
},
{
"last_affected": "9.0.0-p25"
},
{
"introduced": "9.0.0-p26"
},
{
"last_affected": "9.0.0-p26"
},
{
"introduced": "9.0.0-p27"
},
{
"last_affected": "9.0.0-p27"
},
{
"introduced": "9.0.0-p4"
},
{
"last_affected": "9.0.0-p4"
},
{
"introduced": "9.0.0-p7"
},
{
"last_affected": "9.0.0-p7"
},
{
"introduced": "9.0.0-p7\\.1"
},
{
"last_affected": "9.0.0-p7\\.1"
}
],
"source": "CPE_STRING"
}