CVE-2020-12398

Published: 2020-07-09T15:15Z

Last Modified: 2024-11-21T04:59Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbird will continue with an unencrypted connection, causing email data to be sent without protection. This vulnerability affects Thunderbird < 68.9.0. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt