CVE-2018-10950

MEDIUM

Zimbra Collaboration Suite 8.6-8.8 - Information Exposure via Verbose Error Messages

Title source: llm
STIX 2.1

Description

mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows Information Exposure through Verbose Error Messages containing a stack dump, tracing data, or full user-context dump.

References (1)

Core 1
Core References
Issue Tracking, Third Party Advisory x_refsource_misc
https://bugzilla.zimbra.com/show_bug.cgi?id=108963

Scores

CVSS v3 5.3
EPSS 0.0136
EPSS Percentile 68.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-200
Status published
Products (3)
synacor/zimbra_collaboration_suite 8.6.0 (10 CPE variants)
synacor/zimbra_collaboration_suite 8.7.11 (4 CPE variants)
synacor/zimbra_collaboration_suite 8.7.0 - 8.7.11
Published May 10, 2018
Tracked Since Feb 18, 2026