CyberRota Analysis
AI-GeneratedCyrus IMAP versions up to 3.12.2 are vulnerable to URLAUTH token forgery due to a missing mboxkey, allowing attackers to generate valid authentication tokens if they know a folder name in the victim's account. This could grant unauthorized read access to the victim's mailbox, although the likelihood of exploitation is low given the obscurity of the URLAUTH feature and its limited use in public clients. Organizations using affected versions of Cyrus IMAP should prioritize this vulnerability to mitigate potential risks, especially if they utilize URLAUTH functionality.
Original NVD Description
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH token forgery can occur via a missing mboxkey. If an attacker knew a folder name on the victim's account for which the victim had never issued an auth URL, they could forge a working URLAUTH token by computing an HMAC-SHA1 value with a predictable key, giving them read access to the mailbox. (URLAUTH is an obscure feature, meaning that the odds of any user actually being susceptible to this attack are very low. Perhaps no public clients use URLAUTH.)