VULNERABILITY INTELLIGENCE
CVE-2007-6598
CVSS score6.8 NONE
EPSS probability1.96%
CISA KEVNot currently listed
Published2008-01-04
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password.
Weakness classification
- nvd@nist.gov: CWE-264