CVE-2022-37042
KEV · RansomwareSynacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability
View CVE record →- Vendor / Project
- Synacor
- Product
- Zimbra Collaboration Suite (ZCS)
- Date added
- Aug 11, 2022
- Due date
- Sep 1, 2022
- Known ransomware use
- Known
- CWEs
- CWE-23
Description
Synacor Zimbra Collaboration Suite (ZCS) contains an authentication bypass vulnerability in MailboxImportServlet. This vulnerability was chained with CVE-2022-27925 which allows for unauthenticated remote code execution.
Required action
Apply updates per vendor instructions.