CVEvulnerability
CVE-2021-32056
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-05-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
- Weaknesses
- CWE-732
Description
Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall.
Affected configurations
• cyrus imap (< 3.2.7)
• cyrus imap (>= 3.3.0 < 3.4.1)
• fedoraproject fedora 34
• fedoraproject fedora 35
Related
Weakness · CWE (1)
- CWE-732 Incorrect Permission Assignment for Critical Resource weakness
References
- https://cyrus.topicbox.com/groups/announce/T056901c106ecfce3/cyrus-imap-3-4-1-released Patch, Release Notes, Vendor Advisory
- https://cyrus.topicbox.com/groups/announce/T126392718bc29d6b/cyrus-imap-3-2-7-released Patch, Release Notes, Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6HEO3RURJW6NLIXS7NK5PVU6MGHC4SCM/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJZB45QBUN7CZFGOWCZYUYACNBTX7LVS/ lists.fedoraproject.org
- https://www.cyrusimap.org/imap/download/release-notes/3.2/x/3.2.7.html Patch, Release Notes, Vendor Advisory
- https://www.cyrusimap.org/imap/download/release-notes/3.4/x/3.4.1.html Patch, Release Notes, Vendor Advisory
- https://cyrus.topicbox.com/groups/announce/T056901c106ecfce3/cyrus-imap-3-4-1-released Patch, Release Notes, Vendor Advisory
- https://cyrus.topicbox.com/groups/announce/T126392718bc29d6b/cyrus-imap-3-2-7-released Patch, Release Notes, Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6HEO3RURJW6NLIXS7NK5PVU6MGHC4SCM/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJZB45QBUN7CZFGOWCZYUYACNBTX7LVS/ lists.fedoraproject.org
- https://www.cyrusimap.org/imap/download/release-notes/3.2/x/3.2.7.html Patch, Release Notes, Vendor Advisory
- https://www.cyrusimap.org/imap/download/release-notes/3.4/x/3.4.1.html Patch, Release Notes, Vendor Advisory