Threats tagged 'ghsa-j4gv-hpmc-xf3m'

CVE-2026-42393 is a vulnerability in Open-Xchange GmbH OX Dovecot Pro where the comparison for the doveadm password and API key is not fully timing safe. This flaw allows an attacker on the same network to infer the length of the secret by measuring response timing, potentially reducing the effort needed to guess the secret. The secret itself is not disclosed. No public exploits are known, and the vulnerability has a low severity rating.