Man-in-the-Middle (MITM)

aiosmtpd is vulnerable to Man-in-the-Middle (MitM) . The vulnerability is due to accepting unencrypted commands after the STARTTLS protocol command, which allows unencrypted commands to be accepted and treated as if they were encrypted. An attacker can exploit this flaw to perform a Man-in-the-Middle attack.