1 matches found
dovecot: Doveadm: Full access via timing oracle attack in credential verification
A flaw was found in Doveadm, a component of Dovecot. An attacker can exploit a timing oracle vulnerability during the direct comparison of credentials. This allows the attacker to determine the configured credentials, potentially leading to full unauthorized access to the affected component...
7.4CVSS5.4AI score0.00392EPSS
SaveExploits1References5
20