CVE Intelligence

Vulnerabilidades do OfflineIMAP OfflineIMAP

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam OfflineIMAP OfflineIMAP: 1 registro(s), com versões afetadas e correções.

CVE-2020-37248 Média · 6.5 CWE-348 08/06/2026
OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to…
OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over the connection and extracting account credentials in cleartext.