Intrusion PreventionZimbra.Collaboration.Mboximport.Unrestricted.File.Upload
Description
This indicates an attack attempt to exploit an Unrestricted File Upload Vulnerability in Zimbra Collaboration.
This vulnerability is due to improper input validation. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted HTTP request to the target server. Successfully exploiting this vulnerability can result in uploading of web shells and remote code execution.
Affected Products
Zimbra Collaboration 8.8.15 before Patch 33
Zimbra Collaboration 9.0.0 before Patch 26
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://wiki.zimbra.com/wiki/Security_Center
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 51994 |
| Created | Aug 15, 2022 |
| Updated | Aug 16, 2022 |
| Outbreak Alert | Zimbra Collaboration Mboximport |
| Risk |
|
| CVE ID | CVE-2022-27925 CVE-2022-37042 |
| EPSS | 97.45% |
| Default Action | drop |
| Active | |
| Affected OS | Linux, BSD |
| Affected App | Other |