CVEvulnerability

CVE-2022-24732

8.8 HIGH Published 2022-03-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-03-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-324, CWE-613

Description

Maddy Mail Server is an open source SMTP compatible email server. Versions of maddy prior to 0.5.4 do not implement password expiry or account expiry checking when authenticating using PAM. Users are advised to upgrade. Users unable to upgrade should manually remove expired accounts via existing filtering mechanisms.

Affected configurations

• maddy project maddy (>= 0.5.0 < 0.5.4)

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-324 Use of a Key Past its Expiration Date weakness

References