Medium
Security advisory
cs/service/account/AutoCompleteGal.java in Zimbra zm-mailbox before 8.8.15.p8 allows authenticated users to request any GAL account. This differs from the intended behavior in which the domain of the authenticated user must match the domain of the galsync account in the request.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2020-10194
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:29 UTC · Revision 1
Source evidence
cs/service/account/AutoCompleteGal.java in Zimbra zm-mailbox before 8.8.15.p8 allows authenticated users to request any GAL account. This differs from the intended behavior in which the domain of the authenticated user must match the domain of the galsync account in the request.
osv:CVE-2020-10194
Complete source record
{
"id": "8967e562aded02678cc693e28318ef1e7f48f9671c2e1478f960ef6f7ed407bc",
"url": "https://osv.dev/vulnerability/CVE-2020-10194",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2020-10194",
"summary": "cs/service/account/AutoCompleteGal.java in Zimbra zm-mailbox before 8.8.15.p8 allows authenticated users to request any GAL account. This differs from the intended behavior in which the domain of the authenticated user must match the domain of the galsync account in the request.",
"evidence": "osv:CVE-2020-10194",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2020-10194",
"aliases": [
"CVE-2020-10194"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/zimbra/zm-mailbox",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "d30e647f21ecef5490f21facf2e06e228b44a36e"
},
{
"introduced": "d30e647f21ecef5490f21facf2e06e228b44a36e"
},
{
"last_affected": "a12b964a206748de6db6dc1da2ee16249aabafce"
},
{
"fixed": "1df440e0efa624d1772a05fb6d397d9beb4bda1e"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:zimbra:zm-mailbox:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "8.8.15"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:zimbra:zm-mailbox:8.8.15:-:*:*:*:*:*:*",
"range": [
{
"introduced": "8.8.15-NA"
},
{
"last_affected": "8.8.15-NA"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zm-mailbox:8.8.15:patch1:*:*:*:*:*:*",
"range": [
{
"introduced": "8.8.15-patch1"
},
{
"last_affected": "8.8.15-patch1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zm-mailbox:8.8.15:patch2:*:*:*:*:*:*",
"range": [
{
"introduced": "8.8.15-patch2"
},
{
"last_affected": "8.8.15-patch2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zm-mailbox:8.8.15:patch3:*:*:*:*:*:*",
"range": [
{
"introduced": "8.8.15-patch3"
},
{
"last_affected": "8.8.15-patch3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zm-mailbox:8.8.15:patch4:*:*:*:*:*:*",
"range": [
{
"introduced": "8.8.15-patch4"
},
{
"last_affected": "8.8.15-patch4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zm-mailbox:8.8.15:patch5:*:*:*:*:*:*",
"range": [
{
"introduced": "8.8.15-patch5"
},
{
"last_affected": "8.8.15-patch5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zm-mailbox:8.8.15:patch6:*:*:*:*:*:*",
"range": [
{
"introduced": "8.8.15-patch6"
},
{
"last_affected": "8.8.15-patch6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zm-mailbox:8.8.15:patch7:*:*:*:*:*:*",
"range": [
{
"introduced": "8.8.15-patch7"
},
{
"last_affected": "8.8.15-patch7"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "1df440e0efa624d1772a05fb6d397d9beb4bda1e"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"8.8.15-NA",
"8.8.15-patch1",
"8.8.15-patch2",
"8.8.15-patch3",
"8.8.15-patch4",
"8.8.15-patch5",
"8.8.15-patch6",
"8.8.15-patch7",
"8.8.8",
"8.8.12",
"8.8.10",
"8.8.9",
"8.8.7",
"8.8.6",
"8.8.5",
"8.8.4",
"8.8.3",
"8.8.2"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-10194.json",
"vanir_signatures": [
{
"id": "CVE-2020-10194-4314dc38",
"digest": {
"length": 461,
"function_hash": "130804680382483964301386928646396783356"
},
"source": "https://github.com/zimbra/zm-mailbox/commit/d30e647f21ecef5490f21facf2e06e228b44a36e",
"target": {
"file": "store/src/java/com/zimbra/cs/account/ldap/LdapProvisioning.java",
"function": "updateLastLogon"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-10194-81b4ab0b",
"digest": {
"threshold": 0.9,
"line_hashes": [
"229517679686205523715402217324700394259",
"56981330284956748620401296164109700603",
"336897459929083016848280167708331261784",
"87588029407074370430861276684829618465",
"103335325727630520655163700639494496382",
"253093700081280273806403364256489052188"
]
},
"source": "https://github.com/zimbra/zm-mailbox/commit/1df440e0efa624d1772a05fb6d397d9beb4bda1e",
"target": {
"file": "store/src/java/com/zimbra/cs/service/account/AutoCompleteGal.java"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-10194-96c6e311",
"digest": {
"threshold": 0.9,
"line_hashes": [
"35532726304441886843822597725517922529",
"86869606749296562789619135716824747966",
"329209388892522800440224682947664957145",
"301198994465565842404478996247629867721",
"249110717571679374632676844697594286961",
"165150619554600532748713227738510509377",
"135793442757343879754509969633552703576",
"99023990949396355242231588957425096724"
]
},
"source": "https://github.com/zimbra/zm-mailbox/commit/d30e647f21ecef5490f21facf2e06e228b44a36e",
"target": {
"file": "store/src/java/com/zimbra/cs/account/ldap/LdapProvisioning.java"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-10194-aa5bbd03",
"digest": {
"length": 1002,
"function_hash": "121930347612280065506370044909784702061"
},
"source": "https://github.com/zimbra/zm-mailbox/commit/1df440e0efa624d1772a05fb6d397d9beb4bda1e",
"target": {
"file": "store/src/java/com/zimbra/cs/service/account/AutoCompleteGal.java",
"function": "handle"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T13:44:15Z"
}
}
],
"modified": "2026-10-20T13:44:15.089474099Z",
"provider": "osv",
"references": [
"https://github.com/Zimbra/zm-mailbox/commit/1df440e0efa624d1772a05fb6d397d9beb4bda1e",
"https://github.com/Zimbra/zm-mailbox/compare/8.8.15.p7...8.8.15.p8",
"https://github.com/Zimbra/zm-mailbox/pull/1020"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2020-10194",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 388005,
"published_at": "2020-03-20T21:15:17.047+00:00"
}