CVE-2020-11806

The CVE-2020-11806 entry concerns MailStore Outlook Add-in and Email Archive Outlook Add-in up to version 12.1.2, where the login process does not validate the server’s SSL/TLS certificate. This represents a root-cause weakness in certificate validation during authentication, potentially allowing...

CVE-2019-10229

MailStore Server and MailStore Server Service Provider Edition are affected (versions 9.x–11.x before 11.2.2). The root cause is an authentication issue when the directory service is set to Generic LDAP, allowing an attacker to log in as an existing user with an arbitrary password on the second l...