Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33487
HistoryDec 29, 2021 - 9:01 p.m.

Insecure Signature Validation

2021-12-2921:01:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

thunderbird:sid has insecure signature validation. When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added by a mailing list gateway, Thunderbird only considered the inner signed message for the signature validity. This gave the false impression that the additional contents were also covered by the digital signature.