cyrus-imapd is vulnerable to privilege escalation. An attacker is able to obtain additional privileges due to an insecure interpretation of HTTP requests during authentication.
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/
access.redhat.com/errata/RHSA-2020:4655
access.redhat.com/security/updates/classification/#moderate
lists.debian.org/debian-lts-announce/2022/06/msg00013.html
lists.fedoraproject.org/archives/list/[email protected]/message/LAGKPZDXQ6KRUGQVRAO6N4PCINP6KS5F/
lists.fedoraproject.org/archives/list/[email protected]/message/PHV3TUU53WCKJ3BBRK2EHAF44MSZEFK6/
www.cyrusimap.org/imap/download/release-notes/2.5/x/2.5.14.html
www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.12.html