PT-2018-3530
CVE-2019-8337
·
تاريخ النشر
2018-12-13
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
msmtp version 1.8.2
mpop version 1.4.3
Description:
The issue is related to the
tls trust file command in the msmtp and mpop clients, which is associated with improper certificate authentication verification. This could allow a remote attacker to impact the integrity, availability, and confidentiality of information.Recommendations:
For msmtp version 1.8.2, consider updating the configuration of
tls trust file to properly check certificate-verification results.
For mpop version 1.4.3, review and adjust the tls trust file settings to ensure correct authentication of certificates. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾