Unrated
Zimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value.
CVE-2018-17938
First seen on SecPulse
References
- advisory wiki.zimbra.com
- report bugzilla.zimbra.com