Most recent entries from all

bdu:2022-06069

2026-10-04T10:56:16.251262+00:00

bdu:2022-06069

certfr-2022-ale-009 — \[MaJ 12 octobre 2022\] Un correctif est désormais disponible (cf. section Documentation). \[…

2026-10-04T10:56:16.251299+00:00
certfr-2022-ale-009

certfr-2022-avi-902 — De multiples vulnérabilités ont été découvertes dans Zimbra Collaboration. Elles permettent à un attaquant de provoquer…

2026-10-04T10:56:16.251323+00:00
certfr-2022-avi-902

cnvd-2022-67488

2026-10-04T10:56:16.251338+00:00
cnvd-2022-67488

EUVD-2026-365976

2026-10-04T10:56:16.251350+00:00
EUVD-2026-365976

fkie_cve-2022-41352

2026-10-04T10:56:16.251361+00:00

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole (extraction to /opt/zimbra/jetty/webapps/zimbra/public) that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also, pax is in the prerequisites of Zimbra on Ubuntu; however, pax is no longer part of a default Red Hat installation after RHEL 6 (or CentOS 6). Once pax is installed, amavis automatically prefers it over cpio.

GHSA-85q4-vgvj-3q28

2026-10-04T10:56:16.251391+00:00

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavisd via a cpio loophole (extraction to /opt/zimbra/jetty/webapps/zimbra/public) that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also, pax is in the prerequisites of Zimbra on Ubuntu; however, pax is no longer part of a default Red Hat installation after RHEL 6 (or CentOS 6). Once pax is installed, amavisd automatically prefers it over cpio.

gsd-2022-41352

2026-10-04T10:56:16.251407+00:00
gsd-2022-41352