Description
An issue was discovered in SmarterTools SmarterMail through 100.0.7537. Meddler-in-the-middle attackers can pipeline commands after a POP3 STLS command, injecting plaintext commands into an encrypted user session.
Unscored
CVE-2020-29548
EUVD-2020-21914GHSA-rqq5-rg8q-m8pp
An issue was discovered in SmarterTools SmarterMail through 100.0.7537. Meddler-in-the-middle attackers can pipeline commands after a POP3 …
Published Aug 17, 2021 · Updated Aug 4, 2024 · Assigned by mitre