CVE-2024-27442
HIGHDescription
An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. The zmmailboxdmgr binary, a component of ZCS, is intended to be executed by the zimbra user with root privileges for specific mailbox operations. However, an attacker can escalate privileges from the zimbra user to root, because of improper handling of input arguments. An attacker can execute arbitrary commands with elevated privileges, leading to local privilege escalation.
How to fix
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Impact
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploit Intelligence
Low risk: more likely to be exploited than 27% of all known CVEs.
References
Related Vulnerabilities
Other CWE-755 vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2017-5638 | Critical | 9.8 | 100% | KEV + Ransom | Fix |
| CVE-2020-7247 | Critical | 9.8 | 99% | KEV | Fix |
| CVE-2023-36933 | High | 7.5 | 72% | - | Fix |
| CVE-2018-0934 | High | 7.5 | 66% | - | Fix |
| CVE-2019-14287 | High | 8.8 | 64% | - | Fix |
| CVE-2019-12815 | Critical | 9.8 | 58% | - | Fix |
Embed a live status badge for CVE-2024-27442
Markdown
[](https://tridentstack.com/cve/CVE-2024-27442)HTML
<a href="https://tridentstack.com/cve/CVE-2024-27442"><img src="https://tridentstack.com/cve/badge/CVE-2024-27442.svg" alt="CVE-2024-27442"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
Start freeThis product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-08-13.