What the Vuln: Zimbra
bishopfox.com | vulnerability | #rce | #vulnerability-research | #path-traversal | #webmail | #zimbra | #cve-2022-27925
Summary
What the Vuln dissects Zimbra's CVE-2022-27925 path traversal and the CVE-2022-37042 auth bypass, showing how the Network Edition flaw leads to RCE and how to fingerprint the running version.
- Published
- Collected
--- id: 3973 title: "What the Vuln: Zimbra" source_domain: bishopfox.com source_url: "https://bishopfox.com/blog/what-the-vuln-zimbra" published_at: "2023-02-21T00:00:00Z" tags: ["rce", "vulnerability-research", "path-traversal", "webmail", "zimbra", "cve-2022-27925"] phying_url: "https://phying.com/item/3973" lang: en --- # What the Vuln: Zimbra ## Summary What the Vuln dissects Zimbra's CVE-2022-27925 path traversal and the CVE-2022-37042 auth bypass, showing how the Network Edition flaw leads to RCE and how to fingerprint the running version. ## Intelligence Metadata - **Sources:** bishopfox.com - **Published:** 2023-02-21T00:00:00Z - **Original:** https://bishopfox.com/blog/what-the-vuln-zimbra - **Phying News:** https://phying.com/item/3973