CVE-2020-29548

Name of the Vulnerable Software and Affected Versions: SmarterTools SmarterMail versions through 100.0.7537

Description: An issue allows meddler-in-the-middle attackers to pipeline commands after a POP3 STLS command, injecting plaintext commands into an encrypted user session. This can be exploited by attackers to inject commands into the user's session.

Recommendations: For SmarterTools SmarterMail versions through 100.0.7537, consider disabling the POP3 STLS command functionality until a patch is available to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.