Executive Summary

This vulnerability is a Cross-Site Request Forgery (CSRF) issue found in Zimbra Collaboration (ZCS) versions 10.0 and 10.1. It occurs because authentication tokens are issued without CSRF protection during certain account state changes, such as enabling two-factor authentication or changing a password.

While such a token is active, authenticated SOAP requests that cause token generation or state changes can be made without CSRF validation. An attacker could exploit this by tricking a victim into submitting crafted requests, potentially allowing the attacker to perform sensitive actions like disabling two-factor authentication on the victim's account.

The vulnerability is addressed by ensuring that CSRF protection is consistently applied to all issued authentication tokens.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow an attacker to perform unauthorized sensitive actions on a victim's account without their consent. For example, an attacker could disable two-factor authentication by exploiting the lack of CSRF protection on authentication tokens.

Such unauthorized actions could weaken account security, potentially leading to account compromise or unauthorized access to sensitive information.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, ensure that CSRF protection is consistently enforced for all issued authentication tokens, especially those generated after operations such as enabling two-factor authentication or changing a password.

Useful 0 Not Useful 0