Lucene search

K
osvGoogleOSV:CVE-2021-38373
HistoryAug 10, 2021 - 3:15 p.m.

CVE-2021-38373

2021-08-1015:15:08
Google
osv.dev
7
kde kmail
smtp
starttls
cleartext
authentication

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

35.0%

In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless “Server requires authentication” is checked.

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

35.0%