Attackers exploit critical Zimbra vulnerability using cc’d email addresses

Malcontent · Oct 2, 2024

Attackers are actively exploiting a critical vulnerability in mail servers sold by Zimbra in an attempt to remotely execute malicious commands that install a backdoor, researchers warn.

The vulnerability, tracked as CVE-2024-45519, resides in the Zimbra email and collaboration server used by medium and large organizations. When an admin manually changes default settings to enable the postjournal service, attackers can execute commands by sending maliciously formed emails to an address hosted on the server. Zimbra recently patched the vulnerability. All Zimbra users should install it or, at a minimum, ensure that postjournal is disabled.
Click to expand...

Attackers exploit critical Zimbra vulnerability using cc’d email addresses

Log in or Sign up

Attackers exploit critical Zimbra vulnerability using cc’d email addresses

Malcontent Registered Member

Members

Useful Searches