CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. See the original NVD description below for full technical details.
CVE
CVE-2019-18928
Severity
CRITICAL
CVSS
9.8
EPSS
2.39%
Original NVD Description
Cyrus IMAP 2.5.x before 2.5.14 and 3.x before 3.0.12 allows privilege escalation because an HTTP request may be interpreted in the authentication context of an unrelated previous request that arrived over the same connection.
Related CVEs
Other vulnerabilities affecting the same vendor(s)