CVE-2022-3569 Privilege escalation in Zimbra Collaboration Suite (ZCS)

High 7.8 Published 17 Oct 2022 Updated 13 May 2025

Local attackers can escalate privileges to root by exploiting incorrect sudo permissions to run arbitrary commands via postfix.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2022-3569?

CVE-2022-3569 is a high-severity vulnerability in Synacor Zimbra Collaboration Suite, published on 17 Oct 2022. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a local privilege escalation issue in versions 9.0.0 and prior, where the 'zimbra' user can effectively coerce postfix into running arbitrary commands as 'root'.

Weakness: CWE-271

Which versions are affected by CVE-2022-3569?

It affects 1 product.

Products include Synacor Zimbra Collaboration Suite.

How do I fix CVE-2022-3569?

No fix has been published for CVE-2022-3569 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-3569 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-3569 exists.

Public exploit code: 1 Metasploit module.

All Synacor Zimbra Collaboration Suite vulnerabilities

Sources

Also known as GHSA-jq7j-25x9-p735.