vulnerability

Red Hat: CVE-2021-39272: CVE-2021-39272 fetchmail: STARTTLS session encryption bypassing (Multiple Advisories)

Try Surface Command
Back to search
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Published
2021-08-30
Added
2022-05-13
Modified
2023-12-15

Description

Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH.

Solution(s)

redhat-upgrade-fetchmailredhat-upgrade-fetchmail-debuginforedhat-upgrade-fetchmail-debugsource

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today