CVE-2013-5119: Medium severity zimbra collaboration suite vulnerability
Published Sep 23, 2013
·Updated
Zimbra Collaboration Suite (ZCS) 6.0.16 and earlier allows man-in-the-middle attackers to obtain access by sniffing the network and replaying the ZMAUTHTOKEN token.
Affected Software
16 affected components
Synacor Zimbra Collaboration Suite<=6.0.16
Synacor Zimbra Collaboration Suite=6.0.0
Synacor Zimbra Collaboration Suite=6.0.1
Synacor Zimbra Collaboration Suite=6.0.2
Synacor Zimbra Collaboration Suite=6.0.3
Synacor Zimbra Collaboration Suite=6.0.4
Synacor Zimbra Collaboration Suite=6.0.5
Synacor Zimbra Collaboration Suite=6.0.6
Synacor Zimbra Collaboration Suite=6.0.7
Synacor Zimbra Collaboration Suite=6.0.8
Synacor Zimbra Collaboration Suite=6.0.9
Synacor Zimbra Collaboration Suite=6.0.10
Synacor Zimbra Collaboration Suite=6.0.12
Synacor Zimbra Collaboration Suite=6.0.13
Synacor Zimbra Collaboration Suite=6.0.14
Synacor Zimbra Collaboration Suite=6.0.15
Event History
Sep 23, 2013
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the vulnerability severity of CVE-2013-5119?
The severity of CVE-2013-5119 is classified as medium, indicating a moderate risk that can lead to unauthorized access.
2
How can I mitigate CVE-2013-5119?
To mitigate CVE-2013-5119, it is recommended to upgrade to a newer version of Zimbra Collaboration Suite that is not affected.
3
What versions of Zimbra are affected by CVE-2013-5119?
CVE-2013-5119 affects Zimbra Collaboration Suite versions 6.0.16 and earlier.
4
What type of attack does CVE-2013-5119 expose Zimbra to?
CVE-2013-5119 exposes Zimbra to man-in-the-middle attacks allowing attackers to sniff and replay authentication tokens.
5
Is there a patch available for CVE-2013-5119?
No specific patch exists for CVE-2013-5119; upgrading to a fixed version is the required remedial action.