CVE-2020-12619

MailMate before 1.11 automatically imported S/MIME certificates and silently replaced existing ones, enabling a MITM attacker to obtain an email-validated S/MIME certificate from a trusted CA and replace the public key of the entity to be impersonated, thereby decrypting future communications. Th...