Zimbra zm-mailbox before 8.8.15.p8 allows authenticated users to request any GAL account

March 21, 2020

Overview :

cs/service/account/AutoCompleteGal.java in Zimbra zm-mailbox before 8.8.15.p8 allows authenticated users to request any GAL account. This differs from the intended behavior in which the domain of the authenticated user must match the domain of the galsync account in the request.

ZBUG-1094:Broken GAL search filtering #1020

Issue:
Any authenticated user can request any GAL account

Fix:
Added condition to check if the authenticated account is on same domain as that of galsync account in request. If not, throw permission denied.

Testing done:
Manual testing done with user and galsync account on different domains

8.8.15.p8 allows CVE-2020-10194 GAL account ZBUG-1094:Broken Zimbra zm-mailbox

Advanced Machine Learning Based Cloud Security Solution

The Prophaze WAF can be deployed in any Public cloud such as AWS, GCP, Azure, Digital Ocean and on Private Cloud instance like Microk8s

100%

The security of your details is important to us. Prophaze Technologies collects a variety of data that you provide directly to us. The types of data we gather will depend upon the services you use, how you use them, and what you choose to provide. We process your details when necessary to provide you with the services that you have requested when accepting our Terms of Services or when we have the legitimate interest(security, testing, analytics, and so on) to do so please checkout our page.

Demo Request Form

100% Advanced Machine Learning Based Bot Management Solution

Demo Request Form

Zimbra zm-mailbox before 8.8.15.p8 allows authenticated users to request any GAL account

ZBUG-1094:Broken GAL search filtering #1020

Getting Started

Use Cases

WAF Automation

Contact Us