Описание
An issue was discovered in Zimbra Collaboration (ZCS) 8.8.x and 9.x (e.g., 8.8.15). The Sudo configuration permits the zimbra user to execute the NGINX binary as root with arbitrary parameters. As part of its intended functionality, NGINX can load a user-defined configuration file, which includes plugins in the form of .so files, which also execute as root.
Ссылки
- ExploitThird Party Advisory
- Third Party Advisory
- PatchVendor Advisory
- Vendor Advisory
- ExploitThird Party Advisory
- Third Party Advisory
- PatchVendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Одно из
EPSS
7.8 High
CVSS3
Дефекты
Связанные уязвимости
An issue was discovered in Zimbra Collaboration (ZCS) 8.8.x and 9.x (e.g., 8.8.15). The Sudo configuration permits the zimbra user to execute the NGINX binary as root with arbitrary parameters. As part of its intended functionality, NGINX can load a user-defined configuration file, which includes plugins in the form of .so files, which also execute as root.
Уязвимость программы системного администрирования Sudo корпоративной системы управления электронной почтой Zimbra Collaboration Suite, позволяющая нарушителю повысить свои привилегии
EPSS
7.8 High
CVSS3