medium5.3
CVE-2018-15131
An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 b…
Impact
An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 before 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authentication requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synacor | Zimbra Collaboration Suite | from 8.7.0 before 8.7.11 from 8.8.0 before 8.8.8 Versions 8.6.0, 8.7.11, 8.8.8, 8.8.9 |