CVE-2022-41347 - An issue was discovered in Zimbra Collaboration (ZCS) 8.8.x and 9.x (e.g., 8.8.15)

Back Back to CVE browser

HIGH

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.x and 9.x (e.g., 8.8.15)

Published Sep 26, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.42%

Description

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.x and 9.x (e.g., 8.8.15). The Sudo configuration permits the zimbra user to execute the NGINX binary as root with arbitrary parameters. As part of its intended functionality, NGINX can load a user-defined configuration file, which includes plugins in the form of .so files, which also execute as root.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

https://darrenmartyn.ie/2021/10/25/zimbra-nginx-local-root-exploit/
x_refsource_MISCExploitThird Party Advisory
https://github.com/darrenmartyn/zimbra-hinginx
x_refsource_MISCThird Party Advisory
https://wiki.zimbra.com/wiki/Security_Center
x_refsource_MISCPatchVendor Advisory
https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://darrenmartyn.ie/2021/10/25/zimbra-nginx-local-root-exploit/		x_refsource_MISCExploitThird Party Advisory
https://github.com/darrenmartyn/zimbra-hinginx		x_refsource_MISCThird Party Advisory
https://wiki.zimbra.com/wiki/Security_Center		x_refsource_MISCPatchVendor Advisory
https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 26, 2022

Updated May 21, 2025

Reserved Sep 26, 2022

Link CVE-2022-41347

CISA Vulnrichment

Updated May 21, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-41347

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-41347