high7.8
CVE-2023-24032
In Zimbra Collaboration Suite through 9.0 and 8.8.15, an attacker (who has initial user access to a Zimbra server instance) can execute commands as root by pas…
Impact
In Zimbra Collaboration Suite through 9.0 and 8.8.15, an attacker (who has initial user access to a Zimbra server instance) can execute commands as root by passing one of JVM arguments, leading to local privilege escalation (LPE).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zimbra | Collaboration | Versions 8.8.15, 9.0.0 |