This vulnerability in OX Dovecot Pro involves improper neutralization of special elements in SQL commands used during authentication. Specifically, clearing the 'auth_username_chars' configuration allows attackers to bypass SQL-based authentication and enumerate users. The CVSS 3.1 score is 7.7, indicating high severity with network attack vector, high impact on confidentiality and integrity, and low impact on availability. No exploits are publicly known, and the vulnerability is tied to a misconfiguration or improper handling of authentication parameters.

Successful exploitation allows an attacker to bypass authentication controls and enumerate valid users in the system, potentially leading to unauthorized access and information disclosure. The impact on confidentiality and integrity is high, while availability impact is low. No public exploits have been reported, reducing immediate risk but the vulnerability remains critical if the vulnerable configuration is present.

Administrators should avoid clearing the 'auth_username_chars' setting in OX Dovecot Pro to prevent this vulnerability. If clearing this setting is necessary, they must upgrade to the latest fixed version of the software. Since no official patch link is provided, check Open-Xchange GmbH's advisories for the fixed version. No other mitigation guidance is indicated.