CVE-2020-12398 | BDVDB-2026-138556 Detail

MozillaThunderbird

Description#

If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbird will continue with an unencrypted connection, causing email data to be sent without protection. This vulnerability affects Thunderbird < 68.9.0.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.mozilla.org/security/advisories/mfsa2020-22/
https://bugzilla.mozilla.org/show_bug.cgi?id=1613623
https://usn.ubuntu.com/4421-1/

Exploit#

No public exploit known

History#

Version 12020-07-09Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.