CVE-2020-37248

creationtimestamp| type| source ---|---|--- 2026-06-08 17:22:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mns72d7tvl2l...

CVE-2020-37248

OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over the connection and extracting account credentials in cleartext...

Linux Distros Unpatched Vulnerability : CVE-2020-37248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over...