vulnerability

Alpine Linux: CVE-2025-30189: Improper Preservation of Consistency Between Independent Representations of Shared State

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:N)
Published
Oct 31, 2025
Added
Dec 5, 2025
Modified
Dec 5, 2025

Description

When cache is enabled, some passdb/userdb drivers incorrectly cache all users with same cache key, causing wrong cached information to be used for these users. After cached login, all subsequent logins are for same user. Install fixed version or disable caching either globally or for the impacted passdb/userdb drivers. No publicly available exploits are known.

Solution

alpine-linux-upgrade-dovecot
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.