Published: 21/04/2022 Updated: 08/08/2023

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

CVSS v3 Base Score: 7.2 | Impact Score: 5.9 | Exploitability Score: 1.2

VMScore: 694

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal.

Vulnerable Product	Search on Vulmon	Subscribe to Product
zimbra collaboration 9.0.0
zimbra collaboration 8.8.15

This Metasploit module POSTs a ZIP file containing path traversal characters to the administrator interface for Zimbra Collaboration Suite If successful, it plants a JSP-based backdoor within the web directory, then executes it The core vulnerability is a path traversal issue in Zimbra Collaboration Suite's ZIP implementation that can result in t ...

This module POSTs a ZIP file containing path traversal characters to the administrator interface for Zimbra Collaboration Suite If successful, it plants a JSP-based backdoor within the web directory, then executes it The core vulnerability is a path-traversal issue in Zimbra Collaboration Suite's ...

This module POSTs a ZIP file containing path traversal characters to the administrator interface for Zimbra Collaboration Suite. If successful, it plants a JSP-based backdoor within the web directory, then executes it. The core vulnerability is a path-traversal issue in Zimbra Collaboration Suite's ZIP implementation that can result in the extraction of an arbitrary file to an arbitrary location on the host. This issue is exploitable on the following versions of Zimbra: * Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 (and earlier) * Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 (and earlier) Note that the Open Source Edition is not affected.

msf > use exploit/linux/http/zimbra_mboximport_cve_2022_27925
msf exploit(zimbra_mboximport_cve_2022_27925) > show targets
    ...targets...
msf exploit(zimbra_mboximport_cve_2022_27925) > set TARGET < target-id >
msf exploit(zimbra_mboximport_cve_2022_27925) > show options
    ...show and set options...
msf exploit(zimbra_mboximport_cve_2022_27925) > exploit

CVE-2022-27925 Setup git clone githubcom/miko550/CVE-2022-27925git cd CVE-2022-27925 Usage usage: CVE-2022-2925py [-h] [-t TARGET] [-l LIST] options: -h, --help show this help message and exit -t TARGET, --target TARGET The URL of the target, eg: 127001 -l LIST, --list LIST List of target url saper

Zimbra RCE simple poc

CVE-2022-27925-PoC Zimbra RCE simple poc

Zimbra Unauthenticated Remote Code Execution Exploit (CVE-2022-27925)

Zimbra_CVE-2022-37042-_CVE-2022-27925

CVE-2022-27925 nuclei template

CVE-2022-27925 CVE-2022-27925 nuclei template

CVE-2022-27925-PoC Zimbra RCE simple poc

CVE-2022-37042 Zimbra Auth Bypass leads to RCE

CVE-2022-37042 Usage 查看漏洞信息。 go run maingo -s _______ ________ ___ ____ ___ ___ ______________ __ __ ___ / ____/ | / / ____/ |__ \ / __ \__ \|__ \ |__ /__ / __ \/ // /|__ \ / / | | / / __/________/ // / / /_/ /__/ /_____ /_ < / / / / / // /___/ / / /___ | |/ / /__/_____/ __// /_/ / __// __/_____/__/ / / / /_/ /__ __/ __/ \__

Python Script to exploit Zimbra Auth Bypass + RCE (CVE-2022-27925)

Zimbra Unauthenticated Remote Code Execution Exploit (CVE-2022-27925) _____ _ __ /__ / (_)___ ___ / /_ _________ _ / / / / __ `__ \/ __ \/ ___/ __ `/ / /__/ / / / / / / /_/ / / / /_/ / /____/_/_/ /_/ /_/____/_/ \__,_/ CVE-2022-27925 usage: exppy [-h] [-t TARGET] [-m MASS] [-l LHOST] [-p LPORT] optio

A loader for zimbra 2022 rce (cve-2022-27925)

CVE-2022-27925 (Zimbra RCE 2022) This repo is part of the hgrab-framework dork title: "<title>Zimbra Web Client Sign In</title>" Affected product Zimbra Collaboration Suite Network Edition 900 Patch 23 (and earlier) Zimbra Collaboration Suite Network Edition 8815 Patch 30 (and earlier) Installation Install the app on the server user@d

Zimbra Unauthenticated Remote Code Execution Exploit (CVE-2022-27925) _____ _ __ /__ / (_)___ ___ / /_ _________ _ / / / / __ `__ \/ __ \/ ___/ __ `/ / /__/ / / / / / / /_/ / / / /_/ / /____/_/_/ /_/ /_/____/_/ \__,_/ CVE-2022-27925 usage: exppy [-h] [-t TARGET] [-m MASS] [-l LHOST] [-p LPORT] optio

Zimbra CVE-2022-27925 PoC

CVE-2022-27925 Description On May 10, 2022, Zimbra released versions 900 patch 24 and 8815 patch 31 to address multiple vulnerabilities in Zimbra Collaboration Suite, including CVE-2022-27924 (which we wrote about previously) and CVE-2022-27925 Originally, Zimbra called CVE-2022-27925 an authenticated path-traversal attack, where an administrative user could write files in

Zimbra Unauthenticated Remote Code Execution Exploit (CVE-2022-27925)

CVE-2022-27925

Explotación Activa Sobre Zimbra CVE-2022-37042 (RCE Unauthenticated) La siguiente investigación inicio tratando de entender las POC de varios repositorios en GitHub que compartieron muchos investigadores y termino en una sorpresa interesante, que compartiré en los siguientes parrafos El 10 de agosto del presente año el grupo de investigación

If you haven't patched Zimbra holes by now, assume you're toast

The Register • Jessica Lyons Hardcastle • 01 Jan 1970

Topics Security Off-Prem On-Prem Software Offbeat Vendor Voice Vendor Voice Resources Here's how to detect an intrusion via vulnerable email systems How do you choose a Cloud Security Provider?

Organizations that didn't immediately patch their Zimbra email systems should assume miscreants have already found and exploited the bugs, and should start hunting for malicious activity across IT networks, according to Uncle Sam. In a security alert updated on Monday, the US government's Cybersecurity and Infrastructure Security Agency (CISA) and the Multi-State Information Sharing and Analysis Center (MS-ISAC) warned that cybercriminals are actively exploiting five vulnerabilities in the Zimbr...

CVE-2022-27925

Vulnerability Summary

Vulnerability Trend

Exploits

Metasploit Modules

Github Repositories

Recent Articles

References

Vulmon Search

About

Products

Connect