Courier Authlib

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-28374 Mar 15, 05:15 HIGH This Week

The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Debian Debian Linux Courier Authlib

NVD

CVSS 3.1

7.5

EPSS

1.3%

CVE-2021-28374

EPSS 1% CVSS 7.5

HIGH This Week

The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Debian Debian Linux +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy