| Package | Affected versions | Patched versions |
|---|---|---|
| dovecot | < 2.4.3 | 2.4.3 |
| dovecot | < 3.1.4 | 3.1.4 |
Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin. This vulnerability allows bypassing authentication for any user and user enumeration. Do not clear auth_username_chars. If this is not possible, install latest fixed version. No publicly available exploits are known.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free