zmswatch recreated again after patch

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Post Reply
shakesh
Posts: 10
Joined: Tue Oct 09, 2018 6:01 am

zmswatch recreated again after patch

Post by shakesh »

HI,
I am using zcs 8.6.0 GA, I found zmswatch using lot of CPU, after that I have installed patch and killed process, removed zmswatch from /opt/zimbra/log but after sometime it is again created effecting web access in Ajax. Please suggest to permanently remove this.

Thanks
User avatar
quanah
Zimbra Alumni
Zimbra Alumni
Posts: 1668
Joined: Fri Sep 12, 2014 10:33 pm
Contact:

Re: zmswatch recreated again after patch

Post by quanah »

You've been hacked. You need to upgrade to a safe release and then clean out the infection as documented at https://lorenzo.mile.si/zimbra-cve-2019 ... ction/961/
--
Quanah Gibson-Mount
Product Architect, Symas http://www.symas.com/
OpenLDAP Core team http://www.openldap.org/project/
Post Reply