Improper Certificate Validation

apache_airflow is vulnerable to Improper Certificate Validation. The software does not properly validate SMTP certificates, which could allow an attacker to present a malicious certificate to the client which could be used to impersonate a legitimate mail server, allowing the attacker to steal mail server credentials or mail contents. To exploit this vulnerability, the attacker would need to be able to intercept the communication between the client and the mail server.