Lucene search
Veracode Vulnerability DatabaseVERACODE:32517HistoryOct 18, 2021 - 2:16 p.m.
Downgrade Attack
2021-10-1814:16:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
thunderbird
downgrade attack
remote attacker
authenticated session
smtp commands
man in the middle
EPSS
0.002
Percentile
57.7%
thunderbird is vulnerable to downgrade attack. Remote attacker is able to take control of the authenticated session and execute SMTP commands resulting in a man in the middle attack.
References
access.redhat.com/errata/RHSA-2021:3839
access.redhat.com/security/updates/classification/#important
bugzilla.mozilla.org/show_bug.cgi?id=1733366
bugzilla.redhat.com/show_bug.cgi?id=2013469
lists.debian.org/debian-lts-announce/2022/01/msg00001.html
www.debian.org/security/2022/dsa-5034
www.mozilla.org/security/advisories/mfsa2021-47/
Related
nvd
nvd
CVE-2021-38502
2021-11-03 01:15:07
prion
prion
Authentication flaw
2021-11-03 01:15:00
cve
cve
CVE-2021-38502
2021-11-03 01:15:07
debiancve
debiancve
CVE-2021-38502
2021-11-03 01:15:07
redhatcve
redhatcve
CVE-2021-38502
2021-10-12 23:46:02
ubuntucve
ubuntucve
CVE-2021-38502
2021-11-03 00:00:00
alpinelinux
alpinelinux
CVE-2021-38502
2021-11-03 01:15:07
cvelist
cvelist
CVE-2021-38502
2021-11-03 00:02:49
centos
centos
thunderbird security update
2021-11-17 15:26:33
nessus
nessus
Mozilla Thunderbird < 91.2
2021-10-13 00:00:00
Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2021:3841)
2021-10-18 00:00:00
RHEL 7 : thunderbird (RHSA-2021:3841)
2021-10-14 00:00:00
osv
osv
Important: thunderbird security update
2021-10-13 09:04:24
thunderbird - security update
2022-01-04 00:00:00
thunderbird - security update
2022-01-02 00:00:00
redhat
redhat
(RHSA-2021:3839) Important: thunderbird security update
2021-10-13 09:04:49
(RHSA-2021:3840) Important: thunderbird security update
2021-10-13 09:05:55
(RHSA-2021:3838) Important: thunderbird security update
2021-10-13 09:04:24
openvas
openvas
Mozilla Thunderbird Security Advisories (MFSA2021-47, MFSA2021-49) - Windows
2022-11-22 00:00:00
Mageia: Security Advisory (MGASA-2021-0478)
2022-01-28 00:00:00
CentOS: Security Advisory for thunderbird (CESA-2021:3841)
2021-11-18 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2021-10-25 00:00:00
thunderbird security update
2021-10-15 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2021-10-13 22:39:52
kaspersky
kaspersky
KLA12320 Multiple vulnerabilities in Mozilla Thunderbird
2021-10-06 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 91.2.1-alt1
2021-11-02 00:00:00
almalinux
almalinux
Important: thunderbird security update
2021-10-13 09:04:24
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 91.2 — Mozilla
2021-10-06 00:00:00
rocky
rocky
thunderbird security update
2021-10-13 09:04:24
debian
debian
[SECURITY] [DLA 2874-1] thunderbird security update
2022-01-04 10:10:10
[SECURITY] [DSA 5034-1] thunderbird security update
2022-01-02 17:01:50
amazon
amazon
Important: thunderbird
2022-07-06 03:17:00
suse
suse
Security update for MozillaThunderbird (important)
2021-12-29 00:00:00
Security update for MozillaThunderbird (important)
2021-12-22 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2022-01-21 00:00:00