Charybdis Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Charybdis Project records in CISA KEV

No Charybdis Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Charybdis 1 record LOW

Records

1 record

TI-2016-06142 CVE-2016-7143 · GHSA-fr2x-9vgp-crvv

The m_authenticate function in modules/m_sasl.c in Charybdis before 3.5.3 allows remote…

LOW 37

The m_authenticate function in modules/m_sasl.c in Charybdis before 3.5.3 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.0106 Published 2016-09-21 No fix listed CWE-285

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0