Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40208
HistoryApr 20, 2023 - 9:27 a.m.

Improper Certificate Validation

2023-04-2009:27:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
thunderbird
certificate validation
vulnerability
s/mime
email
attacker
unauthorized access

EPSS

0.001

Percentile

21.9%

thunderbird is vulnerable to Improper Certificate Validation. The vulnerability exists because of not checking email receipient certificates when sending S/Mime encrypted email which allows an attacker to send or receive malicious emails and gain access to the system to perform unauthorized actions.