CVE-2019-9621

Summary

CVE-2019-9621 is a serious vulnerability affecting Zimbra Collaboration Suite versions before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3. This issue permits a Remote Server Response Splitting (SSRF) attack, where an attacker can trick the affected software into making unauthorized requests to internal resources, potentially exposing sensitive data. The vulnerability lies within the ProxyServlet component, allowing an adversary to manipulate the proxy settings and execute the malicious SSRF attacks. It is crucial for organizations using these Zimbra Collaboration Suite versions to apply the relevant patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.