nvd-json-data-feeds/CVE-2023/CVE-2023-240xx/CVE-2023-24032.json

{
  "id": "CVE-2023-24032",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2023-06-15T21:15:09.593",
  "lastModified": "2023-06-16T03:19:08.410",
  "vulnStatus": "Awaiting Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "In Zimbra Collaboration Suite through 9.0 and 8.8.15, an attacker (who has initial user access to a Zimbra server instance) can execute commands as root by passing one of JVM arguments, leading to local privilege escalation (LPE)."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://wiki.zimbra.com/wiki/Security_Center",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories",
      "source": "cve@mitre.org"
    }
  ]
}