NetSight
high8.1

CVE-2020-29548

An issue was discovered in SmarterTools SmarterMail through 100.0.7537.

Impact

An issue was discovered in SmarterTools SmarterMail through 100.0.7537. Meddler-in-the-middle attackers can pipeline commands after a POP3 STLS command, injecting plaintext commands into an encrypted user session.

Affected products

VendorProductAffected versions
SmartertoolsSmartermail
through 100.0.7537

Weakness classification

References