CVE-2022-3569 - CVE House
Back to Database
Status published Unknown CVE-2022-3569

Due to an issue with incorrect sudo permissions, Zimbra Collaboration...

Vulnerability Description

Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a local privilege escalation issue in versions 9.0.0 and prior, where the 'zimbra' user can effectively coerce postfix into running arbitrary commands as 'root'.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-3569

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Originally reported by Twitter user @ldsopreload, validated by Ron Bowes of Rapid7

References

More from Synacor

View All →
CVE-2022-37393
Zimbra zmslapd arbitrary module load
High 7.8

Affected Vendor

Affected Software

Zimbra Collaboration Suite (ZCS)
Vulnerable Versions:
9.0.0

Timeline

Official Publish: October 17th, 2022
Last Modified: May 13th, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-271

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.