跳转到帖子

Fixed a security vulnerability in the postjournal service which may allow unauthenticated users to execute commands.

recommended_posts

发布于
  • Members

Fixed a security vulnerability in the postjournal service which may allow unauthenticated users to execute commands.

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
10/02/2024
Created
10/05/2024
Added
01/10/2025
Modified
01/21/2025

Description

The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.

Solution(s)

  • zimbra-collaboration-upgrade-latest

References

  • https://attackerkb.com/topics/cve-2024-45519
  • CVE - 2024-45519
  • https://wiki.zimbra.com/wiki/Security_Center
  • https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy
  • https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes
  • https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes
  • https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes
  • https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46#Security_Fixes
View more
  • 查看数 744
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…