CISA known exploited vulnerability

CVE-2022-41352

Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

SOURCE FACT

Synacor · Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any other user accounts.

Required action

Apply updates per vendor instructions.

CISA notes

https://wiki.zimbra.com/wiki/Security_Center; https://nvd.nist.gov/vuln/detail/CVE-2022-41352

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

CVE-2022-41352

Synacor · Zimbra Collaboration Suite (ZCS)

Required action

CISA notes

Could this product be present?