Security Advisory

CVE-2020-15646

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-10-08 13:37:18

Last updated 2024-08-04 13:22:30

Assigner mozilla

CVSS score not scored

State PUBLISHED

Description

If an attacker intercepts Thunderbird's initial attempt to perform automatic account setup using the Microsoft Exchange autodiscovery mechanism, and the attacker sends a crafted response, then Thunderbird sends username and password over https to a server controlled by the attacker. This vulnerability affects Thunderbird < 68.10.0.

← Browse all CVEs View on cve.org ↗