Unrated

mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 allows Account Enumeration by leveraging a Discrepancy betw...

CVE-2018-10949 First seen on SecPulse May 10, 2018

Original description The description as published by the source.

mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 allows Account Enumeration by leveraging a Discrepancy between the "HTTP 404 - account is not active" and "HTTP 401 - must authenticate" errors.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

report bugzilla.zimbra.com

Key facts

Severity: Unrated
Published: May 10, 2018
First seen on SecPulse: May 10, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:49