Unscored CVE-2013-5119 EUVD-2013-4960GHSA-v5xm-mrqq-93p7

Zimbra Collaboration Suite (ZCS) 6.0.16 and earlier allows man-in-the-middle attackers to obtain access by sniffing the network and replayi…

Published Sep 23, 2013 · Updated Sep 16, 2024 · Assigned by mitre

Description

Zimbra Collaboration Suite (ZCS) 6.0.16 and earlier allows man-in-the-middle attackers to obtain access by sniffing the network and replaying the ZM_AUTH_TOKEN token.

References

97290 vdb-entry
62407 vdb-entry
20130913 Zimbra Collaboration Suite (ZCS) Session Replay Vulnerability mailing-list