PT-2019-15720 · Cyrus+5 · Cyrus Imap+5
CVE-2019-18928
·
Publicado
2019-11-15
·
Atualizado
2025-04-04
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Cyrus IMAP versions 2.5.x through 2.5.13
Cyrus IMAP versions 3.x through 3.0.11
Description
The issue allows privilege escalation because an HTTP request may be interpreted in the authentication context of an unrelated previous request that arrived over the same connection.
Recommendations
For Cyrus IMAP versions 2.5.x through 2.5.13, update to version 2.5.14 or later.
For Cyrus IMAP versions 3.x through 3.0.11, update to version 3.0.12 or later.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Cyrus Imap
Linuxmint
Red Hat
Ubuntu