Local File Read Vulnerability in Dovecot by Dovecot AB

CVE-2016-4983

What is CVE-2016-4983?

A vulnerability was discovered in the postinstall script of the Dovecot RPM package, which permits local users to gain unauthorized access to the contents of newly created SSL/TLS key files. This issue could potentially lead to sensitive data exposure and compromise the security of the affected environment, allowing attackers to exploit this weakness if they possess local user access.

References