未評価
Zimbra Collaboration (ZCS) 10.0 and 10.1 contains an LDAP injection vulnerability in the Mailbox SOAP service within a FolderAction operation. The app...
CVE-2026-33369
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Zimbra Collaboration (ZCS) 10.0 and 10.1 contains an LDAP injection vulnerability in the Mailbox SOAP service within a FolderAction operation. The application fails to properly sanitize user-supplied input before incorporating it into an LDAP search filter. An authenticated attacker can exploit this issue by sending a crafted SOAP request that manipulates the LDAP query, allowing retrieval of sensitive directory attributes.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web wiki.zimbra.com
- web wiki.zimbra.com
- web wiki.zimbra.com
- web wiki.zimbra.com