Vulnerability DatabaseCVE-2022-24732
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2022-24732
Published:March 09, 2022
Updated:May 17, 2026
Maddy Mail Server is an open source SMTP compatible email server. Versions of maddy prior to 0.5.4 do not implement password expiry or account expiry checking when authenticating using PAM. Users are advised to upgrade. Users unable to upgrade should manually remove expired accounts via existing filtering mechanisms.
Related Resources (6)
https://github.com/foxcpp/maddy/commit/7ee6a39c6a1939b376545f030a5efd6f90913583
https://github.com/foxcpp/maddy/releases/tag/v0.5.4
https://github.com/foxcpp/maddy/security/advisories/GHSA-6cp7-g972-w9m9
https://github.com/foxcpp/maddy
https://nvd.nist.gov/vuln/detail/CVE-2022-24732
https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24732.json
Do you need more information?
Contact Us
CVSS v4
Base Score:
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
LOW
User Interaction
NONE
Vulnerable System Confidentiality
LOW
Vulnerable System Integrity
LOW
Vulnerable System Availability
LOW
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
6.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW
Weakness Type (CWE)
Insufficient Session Expiration
CWE-613
Use of a Key Past its Expiration Date
CWE-324
EPSS
Base Score:
0.13