UpHeron
All vulnerabilities

Servers and applications

CVE-2022-3569

Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a local privilege escalation issue in versions 9.0.0 and prior, where the 'zimbra' user can effectively coerce postfix into running arbitrary commands as 'root'.

Severity
High 7.8
Published
17 Oct 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Zimbra CollaborationServers and applications · cpe:a:synacor:zimbra_collaboration_suite
  • Every version up to 9.0.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-3569
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-3569