Red Hat Security AdvisoryRHSA-2020:4655
cyrus-imapd security update
Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) cyrus-imapd-3.0.7-19.el8, cyrus-imapd-utils-3.0.7-19.el8, cyrus-imapd-vzic-3.0.7-19.el8
Fixes 2 records
Priority MEDIUM 47
Cyrus IMAP 2.5.x before 2.5.14 and 3.x before 3.0.12 allows privilege escalation because an HTTP request may be interpreted in the authentication context of an unrelated previous request that arrived over the same connec…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02392 · Published 2019-11-15 · Fixed
Priority LOW 32
An issue was discovered in Cyrus IMAP before 2.5.15, 3.0.x before 3.0.13, and 3.1.x through 3.1.8.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01655 · Published 2019-12-16 · Partial fix CWE-269
