| Package | Affected versions | Patched versions |
|---|---|---|
| imapsync | = 1.500= 1.504= 1.508= 1.516= 1.518= 1.525= 1.53= 1.542= 1.547= 1.554= 1.558= 1.564= 1.567= 1.569≤ 1.580 |
imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain credentials by sniffing the network.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free