CVE Intelligence

Vulnerabilidades de OfflineIMAP

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de OfflineIMAP: 1 registro(s), com severidade, exploração e correções.

OfflineIMAP 1

Somente exploradas (KEV) →

CVE-2020-37248 Média · 6.5 CWE-348 08/06/2026
OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to…
OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over the connection and extracting account credentials in cleartext.