{"id":"CVE-2018-10950","details":"mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows Information Exposure through Verbose Error Messages containing a stack dump, tracing data, or full user-context dump.","modified":"2026-09-14T03:45:08.316820496Z","published":"2018-05-10T01:29:05.707Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"introduced":"8.6.0-NA"},{"last_affected":"8.6.0-NA"},{"introduced":"8.6.0-NA"},{"last_affected":"8.6.0-NA"},{"introduced":"8.6.0-NA"},{"last_affected":"8.6.0-NA"},{"introduced":"8.6.0-NA"},{"last_affected":"8.6.0-NA"},{"introduced":"8.6.0-patch1"},{"last_affected":"8.6.0-patch1"},{"introduced":"8.6.0-patch1"},{"last_affected":"8.6.0-patch1"},{"introduced":"8.6.0-patch1"},{"last_affected":"8.6.0-patch1"},{"introduced":"8.6.0-patch1"},{"last_affected":"8.6.0-patch1"},{"introduced":"8.6.0-patch2"},{"last_affected":"8.6.0-patch2"},{"introduced":"8.6.0-patch2"},{"last_affected":"8.6.0-patch2"},{"introduced":"8.6.0-patch2"},{"last_affected":"8.6.0-patch2"},{"introduced":"8.6.0-patch2"},{"last_affected":"8.6.0-patch2"},{"introduced":"8.6.0-patch3"},{"last_affected":"8.6.0-patch3"},{"introduced":"8.6.0-patch3"},{"last_affected":"8.6.0-patch3"},{"introduced":"8.6.0-patch3"},{"last_affected":"8.6.0-patch3"},{"introduced":"8.6.0-patch3"},{"last_affected":"8.6.0-patch3"},{"introduced":"8.6.0-patch4"},{"last_affected":"8.6.0-patch4"},{"introduced":"8.6.0-patch4"},{"last_affected":"8.6.0-patch4"},{"introduced":"8.6.0-patch4"},{"last_affected":"8.6.0-patch4"},{"introduced":"8.6.0-patch4"},{"last_affected":"8.6.0-patch4"},{"introduced":"8.6.0-patch5"},{"last_affected":"8.6.0-patch5"},{"introduced":"8.6.0-patch5"},{"last_affected":"8.6.0-patch5"},{"introduced":"8.6.0-patch5"},{"last_affected":"8.6.0-patch5"},{"introduced":"8.6.0-patch5"},{"last_affected":"8.6.0-patch5"},{"introduced":"8.6.0-patch6"},{"last_affected":"8.6.0-patch6"},{"introduced":"8.6.0-patch6"},{"last_affected":"8.6.0-patch6"},{"introduced":"8.6.0-patch6"},{"last_affected":"8.6.0-patch6"},{"introduced":"8.6.0-patch6"},{"last_affected":"8.6.0-patch6"},{"introduced":"8.6.0-patch7"},{"last_affected":"8.6.0-patch7"},{"introduced":"8.6.0-patch7"},{"last_affected":"8.6.0-patch7"},{"introduced":"8.6.0-patch7"},{"last_affected":"8.6.0-patch7"},{"introduced":"8.6.0-patch7"},{"last_affected":"8.6.0-patch7"},{"introduced":"8.6.0-patch8"},{"last_affected":"8.6.0-patch8"},{"introduced":"8.6.0-patch8"},{"last_affected":"8.6.0-patch8"},{"introduced":"8.6.0-patch8"},{"last_affected":"8.6.0-patch8"},{"introduced":"8.6.0-patch8"},{"last_affected":"8.6.0-patch8"},{"introduced":"8.6.0-patch9"},{"last_affected":"8.6.0-patch9"},{"introduced":"8.6.0-patch9"},{"last_affected":"8.6.0-patch9"},{"introduced":"8.6.0-patch9"},{"last_affected":"8.6.0-patch9"},{"introduced":"8.6.0-patch9"},{"last_affected":"8.6.0-patch9"}],"source":"CPE_STRING","vendor_product":"synacor:zimbra_collaboration_suite","cpes":["cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch1:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch2:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch3:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch4:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch5:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch6:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch7:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch8:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0:patch9:*:*:*:*:*:*"]}]},"references":[{"type":"REPORT","url":"https://bugzilla.zimbra.com/show_bug.cgi?id=108963"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/zimbra/zm-build","events":[{"introduced":"0"},{"fixed":"6c3c77b328a0d7d3bafecb79d202960217922ef0"},{"fixed":"a12f6b5f02776dff1d0554a7998ae6c6ee0dd820"},{"introduced":"6c3c77b328a0d7d3bafecb79d202960217922ef0"},{"last_affected":"2705a9ca4782dcc4bea5f7d3653c2bf93f8582bb"}],"database_specific":{"extracted_events":[{"introduced":"8.7.0"},{"fixed":"8.7.11"},{"introduced":"8.8.0"},{"fixed":"8.8.8"},{"introduced":"8.7.11-NA"},{"last_affected":"8.7.11-NA"},{"introduced":"8.7.11-patch1"},{"last_affected":"8.7.11-patch1"},{"introduced":"8.7.11-patch2"},{"last_affected":"8.7.11-patch2"},{"introduced":"8.7.11-patch3"},{"last_affected":"8.7.11-patch3"}],"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch1:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch2:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch3:*:*:*:*:*:*"]}}],"versions":["8.7.11-NA","8.7.11-patch1","8.7.11-patch2","8.7.11-patch3","8.7.11.p3","8.7.11.p2","8.7.11.p1","8.7.11","8.8.7","8.8.6","8.8.4","8.8.3","8.8.2","8.8.0.beta1","8.7.10","8.7.9","8.7.7","8.7.6"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10950.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/zimbra/zm-mailbox","events":[{"introduced":"0"},{"fixed":"65929222951131db2cbb2378accbdd5f2fac0980"},{"fixed":"49778e9798e139cb059be07aa1810a2d624ef888"},{"introduced":"65929222951131db2cbb2378accbdd5f2fac0980"},{"last_affected":"5abd025eb6db2ca66e8309f0ec6ded418ca4b3bc"}],"database_specific":{"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch1:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch2:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch3:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.7.0"},{"fixed":"8.7.11"},{"introduced":"8.8.0"},{"fixed":"8.8.8"},{"introduced":"8.7.11-NA"},{"last_affected":"8.7.11-NA"},{"introduced":"8.7.11-patch1"},{"last_affected":"8.7.11-patch1"},{"introduced":"8.7.11-patch2"},{"last_affected":"8.7.11-patch2"},{"introduced":"8.7.11-patch3"},{"last_affected":"8.7.11-patch3"}]}}],"versions":["8.7.11-NA","8.7.11-patch1","8.7.11-patch2","8.7.11-patch3","8.7.6","8.7.11.p3","8.7.11.p2","8.7.11.p1","8.7.11","8.8.7","8.8.6","8.8.5","8.8.4","8.8.3","8.8.2","8.7.10","8.7.9","8.7.7"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10950.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/zimbra/zm-zcs","events":[{"introduced":"0"},{"fixed":"e177bad87d5312e7b2cd1915ae8c0cd2528cacdb"},{"fixed":"34aff8ccf0b1b56d129015c54153bf823915f8ce"},{"introduced":"e177bad87d5312e7b2cd1915ae8c0cd2528cacdb"},{"last_affected":"665cf237e9af42122681f08b9fa7a10d1a35aac3"}],"database_specific":{"extracted_events":[{"introduced":"8.7.0"},{"fixed":"8.7.11"},{"introduced":"8.8.0"},{"fixed":"8.8.8"},{"introduced":"8.7.11-NA"},{"last_affected":"8.7.11-NA"},{"introduced":"8.7.11-patch1"},{"last_affected":"8.7.11-patch1"}],"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch1:*:*:*:*:*:*"]}}],"versions":["8.7.11-NA","8.7.11-patch1","8.7.11.p1","8.7.11","8.8.7","8.8.6","8.8.5","8.8.4","8.8.3","8.8.2","8.8.0beta2","8.8.0.beta1","8.7.10","8.7.9","8.7.7","8.7.6"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10950.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/zimbra/zm-zcs-lib","events":[{"introduced":"0"},{"fixed":"a1cbf80618e47b3cf0894cbbcaec1da9bece583c"},{"fixed":"048ff3fb24f199ee7081e4f1504ec965cdc98be6"},{"introduced":"a1cbf80618e47b3cf0894cbbcaec1da9bece583c"},{"last_affected":"89d7224f1513c35311733d27e602b6c912d01ed2"}],"database_specific":{"extracted_events":[{"introduced":"8.7.0"},{"fixed":"8.7.11"},{"introduced":"8.8.0"},{"fixed":"8.8.8"},{"introduced":"8.7.11-NA"},{"last_affected":"8.7.11-NA"},{"introduced":"8.7.11-patch3"},{"last_affected":"8.7.11-patch3"}],"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:-:*:*:*:*:*:*","cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11:patch3:*:*:*:*:*:*"]}}],"versions":["8.7.11-NA","8.7.11-patch3","8.7.11.p4","8.7.11.p3","8.7.11","8.8.7","8.8.6","8.8.5","8.8.4","8.8.3","8.8.2","8.8.0.beta1","8.7.10","8.7.9","8.7.7","8.7.6"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10950.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}]}