PT-2021-3383 · Dovecot+4 · Dovecot+4
Kirin
·
Published
2021-06-21
·
Updated
2025-01-30
·
CVE-2021-29157
CVSS v3.1
7.5
High
| Vector | AC:H/AV:L/A:N/C:H/I:H/PR:L/S:C/UI:N |
Name of the Vulnerable Software and Affected Versions
Dovecot versions prior to 2.3.15
Description
The issue allows for ../ Path Traversal, enabling an attacker with local filesystem access to trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during local JWT validation with the posix fs driver. The vulnerability is related to errors in encoding the
kid and azp fields in JWT tokens, which can allow an attacker to gain unauthorized access to protected information.Recommendations
For versions prior to 2.3.15, update to version 2.3.15 or later to resolve the issue. As a temporary workaround, consider restricting access to the local filesystem to minimize the risk of exploitation. Additionally, restrict the use of local JWT validation with the posix fs driver until the update is applied.
Fix
RCE
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Dovecot
Linuxmint
Suse
Ubuntu