PT-2020-13168

Name of the Vulnerable Software and Affected Versions eM Client versions prior to 7.2.33412.0 Description The issue allows a man-in-the-middle attacker to obtain an email-validated S/MIME certificate from a trusted CA and replace the public key of the entity to be impersonated. This enables the...

CVE-2020-12618: Undefined Security Weakness

eM Client before 7.2.33412.0 automatically imported S/MIME certificates and thereby silently replaced existing ones. This allowed a man-in-the-middle attacker to obtain an email-validated S/MIME certificate from a trusted CA and replace the public key of the entity to be impersonated. This enable...

PT-2020-13169

Name of the Vulnerable Software and Affected Versions MailMate versions prior to 1.11 Description The issue allows a man-in-the-middle attacker to obtain an email-validated S/MIME certificate from a trusted CA and replace the public key of the entity to be impersonated, enabling the attacker to...

CVE-2020-12619: Undefined Security Weakness

MailMate before 1.11 automatically imported S/MIME certificates and thereby silently replaced existing ones. This allowed a man-in-the-middle attacker to obtain an email-validated S/MIME certificate from a trusted CA and replace the public key of the entity to be impersonated. This enabled the...