CVE-2022-3569
HIGHZimbra Collaboration Suite <9.0.0 - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2022-3569.
PoCs published by EvergreenCartoons, Ron Bowes, including Metasploit module exploits/linux/local/zimbra_postfix_priv_esc.
AI-analyzed exploit summary This Metasploit module exploits a vulnerable sudo configuration in Zimbra that allows the zimbra user to execute postfix as root, which can then execute arbitrary shell scripts to achieve privilege escalation.
Description
Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a local privilege escalation issue in versions 9.0.0 and prior, where the 'zimbra' user can effectively coerce postfix into running arbitrary commands as 'root'.
Exploits (1)
This Metasploit module exploits a vulnerable sudo configuration in Zimbra that allows the zimbra user to execute postfix as root, which can then execute arbitrary shell scripts to achieve privilege escalation.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H