Sploitus

CVE-2019-3814

No indexed exploits for CVE-2019-3814 yet

It was discovered that Dovecot before versions 2.2.36.1 and 2.3.4.1 incorrectly handled client certificates. A remote attacker in possession of a valid certificate with an empty username field could possibly use this issue to impersonate other users.

Affected products
Alt Linux, Centos, Dovecot, Red Hat, Suse, Ubuntu
Dovecot
< 2.2.36.1, 2.3.4.1
Fix
Available
CVSS 3.0
7.7 HIGH
EPSS
2.4% (83th percentile)
Weakness
CWE-295
NVD status
Modified
Published
2019-03-27
CVE-2019-3814 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2019-3814 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2019-3814 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.