CVE-2014-8563

Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS.
References
Link Resource
https://bugzilla.zimbra.com/show_bug.cgi?id=96105 Issue Tracking Permissions Required Vendor Advisory
https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:synacor:zimbra_collaboration_server:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-01-27 19:15

Updated : 2023-12-10 13:13


NVD link : CVE-2014-8563

Mitre link : CVE-2014-8563

CVE.ORG link : CVE-2014-8563


JSON object : View

Products Affected

synacor

  • zimbra_collaboration_server
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')