Zimbra not affected by log4j (CVE-2021-44228)
After intensive review and testing, Zimbra Development determined that the 0-day exploit vulnerability for log4j (CVE-2021-44228) does not affect the current Supported Zimbra versions (9.0.0 & 8.8.15). Zimbra Collaboration Server currently uses log4j1 version 1.2.16 which doesn't contain the lookup expression feature that is found within versions 2.0 to 2.17, which is the cause of the vulnerability. Also, Redhat (CVE-2021-4104) vulnerability does not affect the Zimbra Collaboration Server version (8.8.15 & 9.0.0). For this vulnerability to affect the server, it needs JMSAppender, which the ZCS Server does not use, and the ability to append configuration files.

Detach Nextcloud with Zimbra Drive

All about Zimbra Drive
Posts: 1
Joined: Tue Aug 31, 2021 1:29 pm

Detach Nextcloud with Zimbra Drive

Postby eric.79ty » Tue Aug 31, 2021 1:34 pm


Currently we have Nextcloud integrated with Zimbra through Zimbra Drive. The Nextcloud users is sync from Zimbra where the user's authentication is depended on Zimbra. Currently we plan to detach Nextcloud with Zimbra Drive, where Nextcloud user profile and authentication will be done with our LDAP. Integration with Zimbra will be using Zimlet and Nextcloud OAuth2. May I know is that possible to do so without losing existing users' uploaded files? Any guide that we can refer to if there is any?


Posts: 1
Joined: Fri Sep 03, 2021 6:32 am

Re: Detach Nextcloud with Zimbra Drive

Postby sp1411 » Fri Sep 03, 2021 6:43 am

I'm also looking for solution on migrating Nextcloud users' profile and authentication from Zimbra. Any guide or tools for the migration? Currently we are still using zimbra open drive zimlet in classic interface. We wish to use LDAP authentication to access nextcloud instead of using zimbra authentication. Thank you.

Return to “Zimbra Drive”

Who is online

Users browsing this forum: No registered users and 3 guests