CVE-2022-37042CISA KEV: Actively Exploited

Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability

Published Aug 11, 2022·Updated Aug 11, 2022

Description

Synacor Zimbra Collaboration Suite (ZCS) contains an authentication bypass vulnerability in MailboxImportServlet. This vulnerability was chained with CVE-2022-27925 which allows for unauthenticated remote code execution.

Public Exploits & PoCs3 found

PoC: CVE-2022-37042

Zimbra CVE-2022-37042 Nuclei weaponized template

PoC: zimbra8_lab

Zimbra Lab de CVE-2022-37042 y CVE-2022-37393

PoC: CVE-2022-37042

CVE-2022-37042 Zimbra Auth Bypass leads to RCE

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free