PT-2018-3530

CVE-2019-8337

·

Publicado

2018-12-13

·

Atualizado

2024-06-15

Descrição por

CVSS 3.1
5.3
Média
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions: msmtp version 1.8.2 mpop version 1.4.3
Description: The issue is related to the tls trust file command in the msmtp and mpop clients, which is associated with improper certificate authentication verification. This could allow a remote attacker to impact the integrity, availability, and confidentiality of information.
Recommendations: For msmtp version 1.8.2, consider updating the configuration of tls trust file to properly check certificate-verification results. For mpop version 1.4.3, review and adjust the tls trust file settings to ensure correct authentication of certificates.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Identificadores relacionados
OPENSUSE-SU-2024:11064-1
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾