Debian/dovecot: medium 5.9
Dovecot OTP authentication is vulnerable to replay attack under specific conditions. If auth cache is enabled, and username is altered in passdb, then OTP credentials can be cached so that same OTP re
Action: Upgrade dovecot to 1:2.3.19.1+dfsg1-2.1+deb12u2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:2.3.19.1+dfsg1-2.1+deb12u2 | - |
Fixed versions
| 1:2.3.19.1+dfsg1-2.1+deb12u2 |
Sources
published · modified · JSON