The vulnerability in the implementation of the STARTTLS protocol for the software interface with servers allows a perpetrator to carry out “man-in-the-middle” attacks.

The vulnerability of the STARTTLS protocol implementation in the software for interacting with servers via cURL is related to insufficient authentication checks. Exploiting this vulnerability allows a remote attacker to carry out “man-in-the-middle” attacks...