PT-2018-3530
CVE-2019-8337
·
Publicado
2018-12-13
·
Atualizado
2024-06-15
Descrição por
CVSS 3.1
5.3
MédiaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
msmtp version 1.8.2
mpop version 1.4.3
Description:
The issue is related to the
tls trust file command in the msmtp and mpop clients, which is associated with improper certificate authentication verification. This could allow a remote attacker to impact the integrity, availability, and confidentiality of information.Recommendations:
For msmtp version 1.8.2, consider updating the configuration of
tls trust file to properly check certificate-verification results.
For mpop version 1.4.3, review and adjust the tls trust file settings to ensure correct authentication of certificates.Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾