What We Know About the Zero-Day Vulnerability Affecting Zimbra Collaboration and cpio

On September 10, an attack was reported in the Zimbra forums where a malicious actor was able to upload a JSP web shell into the /public directory to execute a command, generating a pre-authentication key to login to an existing account.

The post What We Know About the Zero-Day Vulnerability Affecting Zimbra Collaboration and cpio appeared first on Flashpoint.

The post What We Know About the Zero-Day Vulnerability Affecting Zimbra Collaboration and cpio appeared first on Security Boulevard.

application security collaboration current-events cyber threat intelligence remote code execution vulnerabilities vulnerability vulnerability intelligence vulnerability management zero-day zero-day vulnerability zimbra