CVE-2023-24032 Information

Description

In Zimbra Collaboration Suite through 9.0 and 8.8.15 an attacker (who has initial user access to a Zimbra server instance) can execute commands as root by passing one of JVM arguments leading to local privilege escalation (LPE).

Reference

https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories https://wiki.zimbra.com/wiki/Security_Center

Share on: