QwikSec

Security Database

CVE

CWE

Training

CVE-2022-22931

Published: Feb 7, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

Fix of CVE-2021-40525 do not prepend delimiters upon valid directory validations. Affected implementations include: - maildir mailbox store - Sieve file repository This enables a user to access other users data stores (limited to user names being prefixed by the value of the username being used).

Vendor	Product	Versions
Apache Software Foundation	Apache James	affected `Apache James 3.6.1`

Weaknesses (CWE)

References

https://lists.apache.org/thread/bp8yql4wws56jlh0vxoowj7foothsmpr

x_refsource_MISC

https://www.openwall.com/lists/oss-security/2022/02/07/1

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.