NIXPKGS-2026-0692
GitHub issue
published on 23 Mar 2026
Permalink
CVE-2026-33550
2.0 LOW
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): HIGH
- Privileges required (PR): HIGH
- User interaction (UI): REQUIRED
- Scope (S): UNCHANGED
- Confidentiality impact (C): NONE
- Integrity impact (I): LOW
- Availability impact (A): NONE
by @LeSuisse Activity log
- Created automatic suggestion
- @LeSuisse accepted
- @LeSuisse published on GitHub
SOGo before 5.12.5 does not renew the OTP if a …
SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length (only 12 digits instead of the 20 recommended).
References
Affected products
SOGo
- <5.12.5
Package maintainers
-
@jceb Jan Christoph Ebersbach <jceb@e-jc.de>