CVE-2010-4532

offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks

published November 13, 2019

CVSS
—
EPSS
1%
Percentile
49.3
In the wild
Unconfirmed
What it is

offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00626 · 49.3th percentile
Published
2019-11-13T17:19Z
EPSS history
Timeline
  • 13 NOV 17:19Z
    offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks
    cvelistv5