PT-2013-5369 · Zimbra · Zimbra Collaboration Suite

Publicado 2013-09-23 · Atualizado 2020-06-04 · CVE-2013-5119

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite (ZCS) versions 6.0.16 and earlier

Description The issue allows man-in-the-middle attackers to obtain access by sniffing the network and replaying the ZM AUTH TOKEN token.

Recommendations For Zimbra Collaboration Suite (ZCS) versions 6.0.16 and earlier, consider restricting access to sensitive areas of the network to minimize the risk of exploitation. As a temporary workaround, implement additional authentication measures to prevent token replay attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2013-5119

Produtos afetados

Zimbra Collaboration Suite

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2013-5119 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5119 · Nota
• http://securityfocus.com/bid/62407 · Nota
• http://osvdb.org/97290 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2013-09/0063.html · Nota