CVE-2022-37393CWE-284

CVE-2022-37393: vulnerability in Synacor Zimbra Server

Zimbra zmslapd arbitrary module load

Published · Updated

Follow this CVE+ Monitor Zimbra Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 1.7%
from disclosure to weaponsame day
Published on NVDAug 16
metasploitOct 27
Zimbra's sudo configuration permits the zimbra user to execute the zmslapd binary as root with arbitrary parameters. As part of its intended functionality, zmslapd can load a user-defined configuration file, which includes plugins in the form of .so files, which also execute as root.
Affected products
Synacor · Zimbra Server