CVE-2020-12398

Katalog CVE

CVSS 7.5 · High EPSS 0,98%

Kerentanan Cleartext Transmission of Sensitive Information pada mozilla thunderbird, canonical ubuntu linux. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbird will continue with an unencrypted connection, causing email data to be sent without protection. This vulnerability affects Thunderbird < 68.9.0.

Rincian

Terbit di NVD

9 Juli 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-319: Cleartext Transmission of Sensitive Information

EPSS (30 hari)

0,98% peluang dieksploitasi; lebih tinggi dari 61,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.mozilla.org/show_bug.cgi?id=1613623 issue tracking · permissions required · advisory vendor
• https://www.mozilla.org/security/advisories/mfsa2020-22/ advisory vendor
• https://usn.ubuntu.com/4421-1/ advisory pihak ketiga