Vulnerabilitymedium
Apache James: SASL OAUTHBEARER do not validate aud in JWT payload if misconfigured (CVE-2025-66621)
Original title: CVE-2025-66621: Apache James: SASL OAUTHBEARER do not validate aud in JWT payload if misconfigred
AI summary · x-ai/grok-4.7Summaries by Vani AI
SASL OAuthBearer fails to validate AUD claim in JWT payload when not configured.
The SASL OAuthBearer protocol in Apache James fails to validate the AUD claim in JWT payloads when introspection is not configured. This allows an attacker with valid credentials to access the mail server.
Security assessment · AI, from the article
Impact: unauthorized access to mail server
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-66621 | JWT AUD claim validation flaw in Apache James SASL OAuthBearer | — | — |
From the original article
Posted by Benoit Tellier on Nov 06 Severity: moderate Affected versions: - Apache James 3. 9. 0 before 3.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.