High severity · published Apr 8, 2016
CVE-2015-6541
Multiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in Zimbra Collaboration Server (ZCS) before 8.5 allow remote attackers to hijack the…
8.8
CVSS
2.9%
EPSS
No
On KEV
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in Zimbra Collaboration Server (ZCS) before 8.5 allow remote attackers to hijack the authentication of arbitrary users for requests that change account preferences via a SOAP request to service/soap/BatchRequest.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZC
Zimbra Collaboration Server · Zimbra
through 8.0.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-6541
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-6541
seclists.org
http://seclists.org/fulldisclosure/2016/Feb/121
wiki.zimbra.com
https://wiki.zimbra.com/wiki/Security/Collab/86#Notes_from_8.5_.28Jetty.29
Exploit
https://www.exploit-db.com/exploits/39500/
More from Zimbra Collaboration Server
6.1
CVE-2016-5721
Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors