darrenmartyn/zimbra-hinginx

darrenmartyn/zimbra-hinginx

GitHubGitHub
GitHubgithub.com
Releases0
Stars12
zimbra nginx lpe exploit
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-41347↗
7.8 HIGH—

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.x and 9.x (e.g., 8.8.15). The Sudo configuration permits the zimbra user to execute the NGINX binary as root with arbitrary parameters. As part of its intended functionality, NGINX can load a user-defined configuration file, which includes plugins in the form of .so files, which also execute as root.