VULNERABILITY INTELLIGENCE

CVE-2018-15131

CVSS score5.3 MEDIUM

EPSS probability1.88%

CISA KEVNot currently listed

Published2019-05-30

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 before 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authentication requests.

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references

cve@mitre.org — Exploit, Issue Tracking, Third Party Advisory
nvd@nist.gov — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Third Party Advisory