VULNERABILITY INTELLIGENCE
CVE-2021-32056
CVSS score4.3 MEDIUM
EPSS probability1.70%
CISA KEVNot currently listed
Published2021-05-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Description
Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall.
Weakness classification
- nvd@nist.gov: CWE-732
Primary references
- cve@mitre.org — Patch, Release Notes, Vendor Advisory
- cve@mitre.org — Patch, Release Notes, Vendor Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Patch, Release Notes, Vendor Advisory
- cve@mitre.org — Patch, Release Notes, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Release Notes, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Release Notes, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Release Notes, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Release Notes, Vendor Advisory