CVE-2017-6813
CriticalSummary
A service provided by Zimbra Collaboration Suite (ZCS) before version 8.7.6 fails to require needed privileges before performing a few requested operations.
Risk Assessment
The lack of privilege requirements may lead to unauthorized access to system functions, posing a risk to the organization's data security.
Recommendation
It is recommended to upgrade Zimbra Collaboration Suite to version 8.7.6 or later to ensure proper security measures.
Other vulnerabilities in Zimbra Collaboration Suite (ZCS)
See all- CVE-2017-6821Critical
Directory traversal vulnerability in Zimbra Collaboration Suite (ZCS) before version 8.7.6 allows attackers to have unspecified impact via unknown vectors.
- CVE-2016-9924Critical
Zimbra Collaboration Suite (ZCS) before version 8.7.4 allows remote attackers to conduct XML External Entity (XXE) attacks.
Original NVD description (English source)
A service provided by Zimbra Collaboration Suite (ZCS) before 8.7.6 fails to require needed privileges before performing a few requested operations.