CVE-2023-24032

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-24032
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-24032.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-24032
Published
2023-06-15T00:00:00Z
Modified
2026-05-28T04:08:31.592603892Z
Summary
[none]
Details

In Zimbra Collaboration Suite through 9.0 and 8.8.15, an attacker (who has initial user access to a Zimbra server instance) can execute commands as root by passing one of JVM arguments, leading to local privilege escalation (LPE).

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/24xxx/CVE-2023-24032.json",
    "cna_assigner": "mitre",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "fixed": "9.0"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}
References

Affected packages

Git / github.com/zimbra/zm-build

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-build
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ac6081fa002b1511e926aba37740d2b6c20f3f43
Last affected
29eea219faf34718f0ef1cda7c3f02c89910c96c
Last affected
62480d2f6aace77ee01bb4b8f46a3eff49cbdfd3
Last affected
71b1626efff0a90ba64ff3e5ab192683e6dccc9a
Last affected
905970576d6fe337150f09c0ad7a0f53aa1a8f42
Last affected
5ae8f73501330bc788daed9c82c1222857d85b8b
Last affected
fe985a33cb83f82816a1e8f93d8d864112a6504e
Last affected
b7209ef3fd859fda5537cc7fbfdeb97cbd1ab931
Last affected
6c2b2cd41fa3625cbd1c12f4e14e07eece395a31
Last affected
3dbd48fe84d22132463b3758e3a40be19267fc9f
Last affected
dbb831c2de39b20cda7ea1e0063645d3cb6d1770
Last affected
0e40da921adb967639011de45841cef4c4601413
Last affected
b6cd8f69d2761c014d4a3807f0bdee0011386444
Last affected
de2eedbbdb8d58c34aac58dbf3866ae721f039eb
Last affected
5561a39cba0898c3bb5e188284d98f498d7a3c9a
Last affected
c8a93da38fd1572d864c1becbcc772ba91ee4403
Last affected
202d83762fca70b7403c144e1fedddc6cd4930a6
Last affected
a163a5dc09ec091fed86421118ec56c90384997a
Last affected
b2faf1c074bf6e2f4f76acd11b9ad5a0b4caec40
Last affected
9173353f25559ed524c7a40c799056c01c3418d4
Last affected
03d99a16095b73a73770fbb6131d10234cfc13fd
Last affected
bcb978ccc354d99d843725886083e321759b6765
Last affected
b20d016c829af1c0ffbaa0545c1deb96ccd5e2e5
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-NA"
        },
        {
            "last_affected": "8.8.15-p1"
        },
        {
            "last_affected": "8.8.15-p11"
        },
        {
            "last_affected": "8.8.15-p20"
        },
        {
            "last_affected": "8.8.15-p26"
        },
        {
            "last_affected": "8.8.15-p3"
        },
        {
            "last_affected": "8.8.15-p30"
        },
        {
            "last_affected": "8.8.15-p31"
        },
        {
            "last_affected": "8.8.15-p32"
        },
        {
            "last_affected": "8.8.15-p33"
        },
        {
            "last_affected": "8.8.15-p34"
        },
        {
            "last_affected": "8.8.15-p35"
        },
        {
            "last_affected": "8.8.15-p5"
        },
        {
            "last_affected": "9.0.0-NA"
        },
        {
            "last_affected": "9.0.0-p0"
        },
        {
            "last_affected": "9.0.0-p1"
        },
        {
            "last_affected": "9.0.0-p19"
        },
        {
            "last_affected": "9.0.0-p23"
        },
        {
            "last_affected": "9.0.0-p25"
        },
        {
            "last_affected": "9.0.0-p26"
        },
        {
            "last_affected": "9.0.0-p27"
        },
        {
            "last_affected": "9.0.0-p33"
        },
        {
            "last_affected": "9.0.0-p4"
        },
        {
            "last_affected": "9.0.0-p7"
        },
        {
            "last_affected": "9.0.0-p7\\.1"
        }
    ],
    "cpe": [
        "cpe:2.3:a:zimbra:collaboration:8.8.15:-:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p1:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p11:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p20:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p26:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p3:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p30:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p31:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p32:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p33:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p34:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p35:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p5:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p0:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p1:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p19:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p23:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p25:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p26:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p27:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p33:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p4:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p7:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p7.1:*:*:*:*:*:*"
    ],
    "source": "CPE_STRING"
}

Affected versions

8.*
8.7.10
8.7.11
8.7.6
8.7.7
8.7.9
8.8.0.beta1
8.8.10
8.8.12
8.8.15
8.8.15.U20
8.8.15.p11
8.8.15.p26
8.8.15.p3
8.8.15.p30
8.8.15.p31
8.8.15.p32
8.8.15.p33
8.8.15.p34
8.8.15.p35
8.8.15.p5
8.8.2
8.8.3
8.8.4
8.8.6
8.8.7
8.8.8
8.8.9
8.8.9.p1
8.8.9.p3
9.*
9.0.0
9.0.0.p0
9.0.0.p19
9.0.0.p23
9.0.0.p25
9.0.0.p26
9.0.0.p27
9.0.0.p28
9.0.0.p33
9.0.0.p4
9.0.0.p7
9.0.0.p7.1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-24032.json"