Synacor Zimbra Collaboration Suite 8.7.x through 8.8.11 allows insecure object deserialization in the IMAP component.Referenceshttps://wiki.zimbra.com/wiki/Zimbra_Security_Advisorieshttps://bugzilla.zimbra.com/show_bug.cgi?id=109097