CVE-2022-26562

An issue in provider/libserver/ECKrbAuth.cpp of Kopano Core = 6.30 introduced between 6.30.0 RC1e and 6.30.8 final...

PT-2022-17932 · Zarafa +3 · Zarafa Collaboration Platform +3

Name of the Vulnerable Software and Affected Versions: Kopano Core versions 11.0.2.51 and earlier Zarafa Collaboration Platform versions 6.30 through 6.30.8 Description: The issue allows attackers to authenticate even if the user account or password is expired. This is due to a problem in the...