CVE-2019-6980: Critical severity zimbra collaboration suite vulnerability
Published May 29, 2019
·Updated
Synacor Zimbra Collaboration Suite 8.7.x through 8.8.11 allows insecure object deserialization in the IMAP component.
Affected Software
26 affected components
Synacor Zimbra Collaboration Suite>=8.7.0<8.7.11
Synacor Zimbra Collaboration Suite>=8.8.0<8.8.9
Synacor Zimbra Collaboration Suite=8.7.11
Synacor Zimbra Collaboration Suite=8.7.11-p1
Synacor Zimbra Collaboration Suite=8.7.11-p2
Synacor Zimbra Collaboration Suite=8.7.11-p3
Synacor Zimbra Collaboration Suite=8.7.11-p4
Synacor Zimbra Collaboration Suite=8.7.11-p5
Synacor Zimbra Collaboration Suite=8.7.11-p6
Synacor Zimbra Collaboration Suite=8.7.11-p7
Synacor Zimbra Collaboration Suite=8.7.11-p8
Synacor Zimbra Collaboration Suite=8.8.9
Synacor Zimbra Collaboration Suite=8.8.9-p1
Synacor Zimbra Collaboration Suite=8.8.9-p2
Synacor Zimbra Collaboration Suite=8.8.9-p3
Synacor Zimbra Collaboration Suite=8.8.9-p4
Synacor Zimbra Collaboration Suite=8.8.9-p6
Synacor Zimbra Collaboration Suite=8.8.9-p7
Synacor Zimbra Collaboration Suite=8.8.9-p8
Synacor Zimbra Collaboration Suite=8.8.10
Synacor Zimbra Collaboration Suite=8.8.10-p2
Synacor Zimbra Collaboration Suite=8.8.10-p3
Synacor Zimbra Collaboration Suite=8.8.10-p4
Synacor Zimbra Collaboration Suite=8.8.10-p6
Synacor Zimbra Collaboration Suite=8.8.11
Synacor Zimbra Collaboration Suite=8.8.11-p2
Event History
May 29, 2019
CVE Published
via MITRE·09:10 PM
Data Sourced
via MITRE·09:10 PM
Description
Frequently Asked Questions
1
What is CVE-2019-6980?
CVE-2019-6980 is a vulnerability in Synacor Zimbra Collaboration Suite 8.7.x through 8.8.11 that allows insecure object deserialization in the IMAP component.
2
How severe is CVE-2019-6980?
CVE-2019-6980 has a severity value of 9.8 (Critical).
3
Which software versions are affected by CVE-2019-6980?
Synacor Zimbra Collaboration Suite versions 8.7.x through 8.8.11 are affected by CVE-2019-6980.
4
How can I fix CVE-2019-6980?
To fix CVE-2019-6980, it is recommended to update Synacor Zimbra Collaboration Suite to a version higher than 8.8.11 or apply the necessary patches provided by Synacor.
5
Where can I find more information about CVE-2019-6980?
You can find more information about CVE-2019-6980 on the Synacor Zimbra Bugzilla and Security Advisories wiki pages.