Lucene search
K

9 matches found

RedHat Linux
RedHat Linux
added 2022/11/15 9:45 a.m.3 views

dovecot: Privilege escalation when similar master and non-master passdbs are used

A vulnerability was found in the Dovecot IMAP Server. When two passdb configuration entries exist in the Dovecot configuration, which have the same driver and args settings, the incorrect usernamefilter and mechanism settings can be applied to passdb definitions. These incorrect settings can lead...

8.8CVSS7.3AI score0.00307EPSS
Exploits1References5
OSV
OSV
added 2022/08/25 9:21 p.m.7 views

MGASA-2022-0296 Updated dovecot packages fix security vulnerability

An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the same driver and args settings, incorrect usernamefilter and mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead...

8.8CVSS8.5AI score0.00307EPSS
Exploits1References6
Prion
Prion
added 2022/07/17 7:15 p.m.22 views

Design/Logic Flaw

An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the same driver and args settings, incorrect usernamefilter and mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead...

6.5CVSS8.6AI score0.00307EPSS
Exploits1References5Affected Software2
Cvelist
Cvelist
added 2022/07/17 12:0 a.m.16 views

CVE-2022-30550

An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the same driver and args settings, incorrect usernamefilter and mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead...

9AI score0.00307EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2022/07/17 12:0 a.m.22 views

CVE-2022-30550

An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the same driver and args settings, incorrect usernamefilter and mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead...

7AI score0.00307EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2022/07/17 12:0 a.m.30 views

CVE-2022-30550

An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the same driver and args settings, incorrect usernamefilter and mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead...

8.8CVSS7.8AI score0.00307EPSS
Exploits1
0day.today
0day.today
added 2022/07/08 12:0 a.m.429 views

Dovecot IMAP Server 2.2 Improper Access Control Vulnerability

Dovecot IMAP server version 2.2 suffers from a privilege escalation vulnerability. When two passdb configuration entries exist in the Dovecot configuration, which have the same driver and args settings, the incorrect usernamefilter and mechanism settings can be applied to passdb definitions. Thes...

8.8CVSS8.9AI score0.00307EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2022/07/07 8:44 p.m.33 views

CVE-2022-30550

A vulnerability was found in the Dovecot IMAP Server. When two passdb configuration entries exist in the Dovecot configuration, which have the same driver and args settings, the incorrect usernamefilter and mechanism settings can be applied to passdb definitions. These incorrect settings can lead...

6.8CVSS3.1AI score0.00307EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2022/07/07 12:0 a.m.29 views

CVE-2022-30550

An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the same driver and args settings, incorrect usernamefilter and mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead...

8.8CVSS6.9AI score0.00307EPSS
Exploits1References3
Rows per page
Query Builder