PT-2019-7208 · Synacor · Zimbra Mail Client

Publicado 2019-05-30 · Atualizado 2019-05-31 · CVE-2015-7609

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Synacor Zimbra Mail Client version 8.6 before 8.6.0 Patch 5

Description The issue concerns a problem with the error/warning dialog and email body content in Zimbra, allowing for XSS.

Recommendations For Synacor Zimbra Mail Client version 8.6 before 8.6.0 Patch 5, update to 8.6.0 Patch 5 or later to resolve the issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2015-7609

Produtos afetados

Zimbra Mail Client

Referências · 8

• 🔥 https://bugzilla.zimbra.com/show_bug.cgi?id=101435 · Exploit
• https://fortiguard.com/zeroday/FG-VD-15-081 · Nota
• https://fortiguard.com/zeroday/FG-VD-15-080 · Nota
• https://wiki.zimbra.com/wiki/Security_Center · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7609 · Nota
• https://bugzilla.zimbra.com/show_bug.cgi?id=101436 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-7609 · Nota de Segurança
• https://t.me/cibsecurity/4611 · Publicação no Telegram