Zimbra Police [exclusive] -
Zimbra is a popular choice for government and law enforcement agencies—such as the in Germany or the State Hydrology Agency in Ukraine—because it offers "sovereign" email hosting.
In the context of the , "police" typically refers to the Cluebringer Policy Daemon (cbpolicyd) or specific features used for legal enforcement and governance. 1. Cluebringer Policy Daemon (cbpolicyd) zimbra police
That illusion shattered starting in 2021 with (an unauthenticated SQL injection) and exploded with CVE-2022-27924 (Memcached command injection). However, the watershed moment was CVE-2023-38750 —a remote code execution vulnerability that allowed unauthenticated attackers to drop webshells with the privileges of the zimbra user. Zimbra is a popular choice for government and