2 matches found
Debian DLA-2625-1 : courier-authlib security update
The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's...
7.5CVSS7.1AI score0.01261EPSS
SaveExploits0References4
CVE-2021-28374
The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's...
7.5CVSS7.4AI score
SaveExploits0References2
20