CVE-2021-29969
CVE-2021-29969
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
05 ago 2021Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
If Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected IMAP server responses prior to the completion of the STARTTLS handshake, then Thunderbird didn't ignore the injected data. This could have resulted in Thunderbird showing incorrect information, for example the attacker could have tricked Thunderbird to show folders that didn't exist on the IMAP server. This vulnerability affects Thunderbird < 78.12.
Productos afectados
Mozilla · Thunderbird¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →