CVE-2024-35179: Unprivileged Stalwart Mail Server user can read files as root
Stalwart Mail Server is an open-source mail server. Prior to version 0.8.0, when using RUNASUSER, the specified user (and therefore, web interface admins) can read arbitrary files as root. This issue affects admins who have set up to run stalwart with RUNASUSER who handed out admin credentials to the mail server but expect these to only grant access according to the RUNASUSER and are attacked where the attackers managed to achieve Arbitrary Code Execution using another vulnerability. Version 0.8.0 contains a patch for the issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35179?
CVE-2024-35179 is considered a high-severity vulnerability due to the potential for unauthorized access to sensitive files.
How do I fix CVE-2024-35179?
To fix CVE-2024-35179, upgrade to Stalwart Mail Server version 0.8.0 or later, which addresses this vulnerability.
Who is affected by CVE-2024-35179?
CVE-2024-35179 affects administrators using Stalwart Mail Server with the RUN_AS_USER feature before version 0.8.0.
What are the risks of CVE-2024-35179?
The risks of CVE-2024-35179 include unauthorized access to arbitrary files that could lead to data breaches or system compromise.
Is CVE-2024-35179 actively being exploited?
There are currently no public reports of active exploitation of CVE-2024-35179, but the vulnerability is significant enough to warrant immediate attention.