exploit/linux/local/zimbra_slapper_priv_esc

weaponized

Zimbra zmslapd arbitrary module load

view exploit source metasploittype exploitpublished 2021-10-27catalog metasploit
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2022-37393UShigh7.8Exploit
Zimbra's sudo configuration permits the zimbra user to execute the zmslapd binary as root with arbitrary parameters. As part of its intended functionality, zmslapd can load a user-…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan