CVE-2021-38373

In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless "Server requires authentication" is checked

published August 10, 2021

CVSS
—
EPSS
1%
Percentile
43.8
In the wild
Unconfirmed
What it is

In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless "Server requires authentication" is checked.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00527 · 43.8th percentile
Published
2021-08-10T14:51Z
EPSS history
Timeline
  • 10 AUG 14:51Z
    In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless "Server requires authentication" is checked
    cvelistv5