CVE Vulnerabilities

CVE-2013-5119

Improper Authentication

Published: Sep 23, 2013 | Modified: Jun 04, 2020
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Zimbra Collaboration Suite (ZCS) 6.0.16 and earlier allows man-in-the-middle attackers to obtain access by sniffing the network and replaying the ZM_AUTH_TOKEN token.

Weakness

When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Zimbra_collaboration_suite Synacor 6.0.0 6.0.0
Zimbra_collaboration_suite Synacor 6.0.1 6.0.1
Zimbra_collaboration_suite Synacor 6.0.2 6.0.2
Zimbra_collaboration_suite Synacor 6.0.3 6.0.3
Zimbra_collaboration_suite Synacor 6.0.4 6.0.4
Zimbra_collaboration_suite Synacor 6.0.5 6.0.5
Zimbra_collaboration_suite Synacor 6.0.6 6.0.6
Zimbra_collaboration_suite Synacor 6.0.7 6.0.7
Zimbra_collaboration_suite Synacor 6.0.8 6.0.8
Zimbra_collaboration_suite Synacor 6.0.9 6.0.9
Zimbra_collaboration_suite Synacor 6.0.10 6.0.10
Zimbra_collaboration_suite Synacor 6.0.12 6.0.12
Zimbra_collaboration_suite Synacor 6.0.13 6.0.13
Zimbra_collaboration_suite Synacor 6.0.14 6.0.14
Zimbra_collaboration_suite Synacor 6.0.15 6.0.15
Zimbra_collaboration_suite Synacor * 6.0.16

Potential Mitigations

References