March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – WannaCry Ransomware – Active IOCs
August 11, 2022
Rewterz Threat Update – Cisco Suffered A Data Breach Attack By The Yanluowang Ransomware Gang
August 11, 2022
Rewterz Threat Alert – WannaCry Ransomware – Active IOCs
August 11, 2022
Rewterz Threat Update – Cisco Suffered A Data Breach Attack By The Yanluowang Ransomware Gang
August 11, 2022
Severity
High
Analysis Summary
CVE-2022-37393
Zimbra could allow a local authenticated attacker to gain elevated privileges on the system, caused by a flaw in the sudo configuration. By sending a specially-crafted request, an <authenticated> attacker could exploit this vulnerability to execute the zmslapd binary as root user.
Impact
- Privilege Escalation
Indicators Of Compromise
CVE
- CVE-2022-37393
Affected Vendors
Zimbra
Affected Products
- Zimbra 8.8.15
Remediation
Refer to Zimbra Security Advisory for patch, upgrade or suggested workaround information.
Zimbra Security Advisory