CVE-2021-38502
UNKNOWN
Published 2021-11-03T00:02:49
Actions:
No CVSS data available
Description
Thunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM could perform a downgrade attack to intercept transmitted messages, or could take control of the authenticated session to execute SMTP commands chosen by the MITM. If an unprotected authentication method was configured, the MITM could obtain the authentication credentials, too. This vulnerability affects Thunderbird < 91.2.
Available Exploits
No exploits available for this CVE.
Related News
No news articles found for this CVE.
Affected Products
Affected Versions:
References
Published: 2021-11-03T00:02:49
Last Modified: 2024-08-04T01:44:22.910Z
Copied to clipboard!