Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2021-32056

Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall.

  • Published: May 10, 2021
  • Updated: Apr 14, 2023
  • CVE: CVE-2021-32056
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CVSS v2:

  • Severity: Low
  • Score: 4
  • AV:N/AC:L/Au:S/C:N/I:N/A:P

CWEs:

Software From Fixed in
cyrus / imap 3.3.0 3.4.1
cyrus / imap - 3.2.7
fedoraproject / fedora 34 34.x
fedoraproject / fedora 35 35.x