---

CVE-2020-12398 - log back

CVE-2020-12398 edited at 05 Jun 2020 13:57:36
Severity	- Unknown + High
Remote	- Unknown + Remote
Type	- Unknown + Man-in-the-middle
Description	+ A security downgrade issue has been found in Thunderbird before 68.9.0. If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbird will continue with an unencrypted connection, causing email data to be sent without protection.
References	+ https://www.mozilla.org/en-US/security/advisories/mfsa2020-22/#CVE-2020-12398 + https://bugzilla.mozilla.org/show_bug.cgi?id=1613623
Notes

CVE-2020-12398 created at 05 Jun 2020 13:53:10