CVE-2016-4983

2019-11-0521:45:36

redhat

www.cve.org

3.4 Low

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files.

CNA Affected

[
  {
    "product": "dovecot22",
    "vendor": "Fedora",
    "versions": [
      {
        "status": "affected",
        "version": "dovecot22-2.2.25-3.1"
      }
    ]
  },
  {
    "product": "dovecot22",
    "vendor": "Fedora",
    "versions": [
      {
        "status": "affected",
        "version": "dovecot22-2.2.18-9.1"
      }
    ]
  },
  {
    "product": "dovecot22",
    "vendor": "Fedora",
    "versions": [
      {
        "status": "affected",
        "version": "dovecot22-2.2.13-3.7.1"
      }
    ]
  }
]