Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
Date added (CISA)
2022-08-04
Remediation due
2022-08-25
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to inject memcache commands into a targeted instance which causes an overwrite of arbitrary cached entries.