CVE-2018-10951 : mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows z

mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows zimbraSSLPrivateKey read access via a GetServer, GetAllServers, or GetAllActiveServers call in the Admin SOAP API.

Published 2018-05-10 01:29:06

Updated 2020-06-04 12:32:27

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2018-10951

EPSS FAQ

0.07%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 27 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-10951

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.0	MEDIUM	AV:N/AC:L/Au:S/C:P/I:N/A:N	8.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
6.5	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	2.8	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

Products affected by CVE-2018-10951

Zimbra » Zimbra Collaboration Suite » Version: 8.6 Update Patch2
cpe:2.3:a:zimbra:zimbra_collaboration_suite:8.6:patch2:*:*:*:*:*:*
Matching versions
Zimbra » Zimbra Collaboration Suite » Version: 8.6 Update Patch4
cpe:2.3:a:zimbra:zimbra_collaboration_suite:8.6:patch4:*:*:*:*:*:*
Matching versions
Zimbra » Zimbra Collaboration Suite » Version: 8.7.11 Update Patch1
cpe:2.3:a:zimbra:zimbra_collaboration_suite:8.7.11:patch1:*:*:*:*:*:*
Matching versions
Zimbra » Zimbra Collaboration Suite » Version: 8.6 Update Patch6
cpe:2.3:a:zimbra:zimbra_collaboration_suite:8.6:patch6:*:*:*:*:*:*
Matching versions
Zimbra » Zimbra Collaboration Suite » Version: 8.6 Update Patch7
cpe:2.3:a:zimbra:zimbra_collaboration_suite:8.6:patch7:*:*:*:*:*:*
Matching versions
Zimbra » Zimbra Collaboration Suite » Version: 8.6 Update Patch8
cpe:2.3:a:zimbra:zimbra_collaboration_suite:8.6:patch8:*:*:*:*:*:*
Matching versions
Zimbra » Zimbra Collaboration Suite » Version: 8.6 Update Patch9
cpe:2.3:a:zimbra:zimbra_collaboration_suite:8.6:patch9:*:*:*:*:*:*
Matching versions
Zimbra » Zimbra Collaboration Suite » Version: 8.6
cpe:2.3:a:zimbra:zimbra_collaboration_suite:8.6:*:*:*:*:*:*:*
Matching versions
Zimbra » Zimbra Collaboration Suite » Version: 8.6 Update Patch1
cpe:2.3:a:zimbra:zimbra_collaboration_suite:8.6:patch1:*:*:*:*:*:*
Matching versions
Zimbra » Zimbra Collaboration Suite » Version: 8.6 Update Patch3
cpe:2.3:a:zimbra:zimbra_collaboration_suite:8.6:patch3:*:*:*:*:*:*
Matching versions
Zimbra » Zimbra Collaboration Suite » Version: 8.6 Update Patch5
cpe:2.3:a:zimbra:zimbra_collaboration_suite:8.6:patch5:*:*:*:*:*:*
Matching versions
Zimbra » Zimbra Collaboration Suite » Version: 8.7.11 Update Patch2
cpe:2.3:a:zimbra:zimbra_collaboration_suite:8.7.11:patch2:*:*:*:*:*:*
Matching versions
Synacor » Zimbra Collaboration Suite
Versions from including (>=) 8.7 and up to, including, (<=) 8.7.11
cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*
Matching versions
Synacor » Zimbra Collaboration Suite
Versions from including (>=) 8.8 and before (<) 8.8.8
cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2018-10951

Exploit prediction scoring system (EPSS) score for CVE-2018-10951

CVSS scores for CVE-2018-10951

References for CVE-2018-10951

Products affected by CVE-2018-10951