PT-2013-5369 · Zimbra · Zimbra Collaboration Suite

Published 2013-09-23 · Updated 2020-06-04 · CVE-2013-5119

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite (ZCS) versions 6.0.16 and earlier

Description The issue allows man-in-the-middle attackers to obtain access by sniffing the network and replaying the ZM AUTH TOKEN token.

Recommendations For Zimbra Collaboration Suite (ZCS) versions 6.0.16 and earlier, consider restricting access to sensitive areas of the network to minimize the risk of exploitation. As a temporary workaround, implement additional authentication measures to prevent token replay attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2013-5119

Affected Products

Zimbra Collaboration Suite

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2013-5119 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5119 · Note
• http://securityfocus.com/bid/62407 · Note
• http://osvdb.org/97290 · Note
• http://archives.neohapsis.com/archives/bugtraq/2013-09/0063.html · Note