Lucene search

Sydent does not verify email server certificates

🗓️ 31 Jul 2023 22:44:03Reported by GoogleType

osv🔗 osv.dev👁 24 Views

Sydent TLS configuration does not verify email server certificates, making emails vulnerable to interception. Mitigations in Sydent 2.5.6 release

Reporter	Title	Published	Views	Family All 11
Vulnrichment	CVE-2023-38686 Sydent does not verify email server certificates	4 Aug 202315:57	–	vulnrichment
CVE	CVE-2023-38686	4 Aug 202316:15	–	cve
OSV	CVE-2023-38686	4 Aug 202316:15	–	osv
OSV	PYSEC-2023-139	4 Aug 202316:15	–	osv
Veracode	Improper Certificate Validation	2 Aug 202314:23	–	veracode
UbuntuCve	CVE-2023-38686	4 Aug 202300:00	–	ubuntucve
Prion	Code injection	4 Aug 202316:15	–	prion
NVD	CVE-2023-38686	4 Aug 202316:15	–	nvd
Github Security Blog	Sydent does not verify email server certificates	31 Jul 202322:03	–	github
Cvelist	CVE-2023-38686 Sydent does not verify email server certificates	4 Aug 202315:57	–	cvelist

Source	Link
github	www.github.com/matrix-org/sydent/security/advisories/GHSA-p6hw-wm59-3g5g
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-38686
github	www.github.com/python/cpython/issues/91826
github	www.github.com/matrix-org/sydent/pull/574
github	www.github.com/matrix-org/sydent/commit/1cd748307c6b168b66154e6c4db715d4b9551261
docs	www.docs.python.org/3/library/ssl.html
github	www.github.com/matrix-org/sydent
github	www.github.com/matrix-org/sydent/releases/tag/v2.5.6
github	www.github.com/pypa/advisory-database/tree/main/vulns/matrix-sydent/PYSEC-2023-139.yaml
peps	www.peps.python.org/pep-0476

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

31 Jul 2023 22:03Current

6.4Medium risk

Vulners AI Score6.4

CVSS35.3 - 9.3

EPSS0.0006

SSVC