Information Disclosure Vulnerability in Zimbra Collaboration Suite
CVE-2018-10951

6.5MEDIUM

Key Information:

Vendor

Zimbra

Status
Zimbra Collaboration Suite
Vendor
CVE Published:
10 May 2018

What is CVE-2018-10951?

The Zimbra Collaboration Suite has an information disclosure vulnerability that allows unauthorized read access to the sensitive zimbraSSLPrivateKey through various Admin SOAP API calls. This flaw exists in versions prior to 8.8.8, 8.7.11.Patch3, and 8.6.0.Patch10, potentially exposing critical server information to attackers and undermining the integrity of the platform's security.

References

https://bugzilla.zimbra.com/show_bug.cgi?id=108894
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.