Test ID:	1.3.6.1.4.1.25623.1.0.117154
Category:	General
Title:	Dovecot 2.2.26 - 2.3.11.3 Information Disclosure Vulnerability
Summary:	Dovecot is prone to an information disclosure vulnerability.
Description:	Summary: Dovecot is prone to an information disclosure vulnerability. Vulnerability Insight: When imap hibernation is active, an attacker can cause Dovecot to discover file system directory structure and access other users' emails using specially crafted command. The attacker must have valid credentials to access the mail server. Vulnerability Impact: Attacker can access other users' emails and filesystem information. Affected Software/OS: Dovecot versions 2.2.26 - 2.3.11.3. Solution: Update to version 2.3.13 or later. CVSS Score: 4.9 CVSS Vector: AV:N/AC:M/Au:S/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-24386 Debian Security Information: DSA-4825 (Google Search) https://www.debian.org/security/2021/dsa-4825 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GXDKFLOCUP7I4ELGQ2F4P5TGC6NXMYV7/ http://seclists.org/fulldisclosure/2021/Jan/18 https://security.gentoo.org/glsa/202101-01 http://packetstormsecurity.com/files/160842/Dovecot-2.3.11.3-Access-Bypass.html https://doc.dovecot.org/configuration_manual/hibernation/ https://dovecot.org/security
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.