CVE-2022-27924
CVE-2022-27924
In short
Zimbra Collaboration has a flaw that allows attackers without logging in to inject harmful commands into its cache memory system, potentially overwriting important stored data and disrupting service.
Technical detail
CVE-2022-27924 is an unauthenticated memcache injection vulnerability (CWE-74) in Zimbra Collaboration 8.8.15 and 9.0. The vulnerability stems from improper input validation allowing arbitrary memcache commands to be injected and executed unescaped, resulting in arbitrary cache entry overwrite and potential denial of service or information disclosure.
Summary generated and translated by AI from the official description.
Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an overwrite of arbitrary cached entries.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →