CVE-2022-41352

Vulnerability details

Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any other user accounts.

Added to CISA KEV: 2022-10-20

Ransomware campaign use: Known

CISA due date: 2022-11-10

Defensive guidance from CISA

Apply updates per vendor instructions.

This is the source's required-action field, not an independently validated patch procedure. Refer to the vendor for exact affected versions and fixes.