6.8
Moyenne
CVE-2026-27855 Dovecot OTP authentication is vulnerable to replay attack under specific conditions
Description
Dovecot OTP authentication is vulnerable to replay attack under specific conditions. If auth cache is enabled, and username is altered in passdb, then OTP credentials can be cached so that same OTP reply is valid. An attacker able to observe an OTP exchange is able to log in as the user. If authentication happens over unsecure connection, switch to SCRAM protocol. Alternatively ensure the communcations are secured, and if possible switch to OAUTH2 or SCRAM. No publicly available exploits are known.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| OX Dovecot Pro 2.3 | premières → 2.3.0 | Pas de correctif indiqué |
Références
- documentation.open-xchange.com documentation.open-xchange.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de OX Dovecot Pro
Les 44 CVE de OX Dovecot Pro →
CVE-2026-73209
An attacker that has valid credentials can send crafted compressed data that causes the affected process to exhaust…
6.5
Moyenne
CVE-2026-73208
An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token…
7.4
Élevée
CVE-2026-52687
An attacker that has valid credentials can select a compression algorithm for the IMAP connection whose decompression…
6.5
Moyenne
CVE-2026-52681
Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the…
3.1
Faible