CVE-2021-38502

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

Thunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM could perform a downgrade attack to intercept transmitted messages, or could take control of the authenticated session to execute SMTP commands chosen by the MITM. If an unprotected authentication method was configured, the MITM could obtain the authentication credentials, too. This vulnerability affects Thunderbird < 91.2.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Nov 3, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-3850310.0The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts CVE-2021-385048.8When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-free could have resulted, leading to CVE-2021-385056.5Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will record data copied to the clipboard to the CVE-2021-385064.3Through a series of navigations, Firefox could have entered fullscreen mode without notification or warning to the user. This could lead to CVE-2021-385076.5The Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently upgraded to TLS while retaining the visual CVE-2021-385084.3By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geolocation), the validit CVE-2021-385094.3Due to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with arbitrary (although unstyled) contents could be d CVE-2021-38515.4firefly-iii is vulnerable to URL Redirection to Untrusted Site CVE-2021-385108.8The executable file warning was not presented when downloading .inetloc files, which, due to a flaw in Mac OS, can run commands on a user's CVE-2021-385117.5An issue was discovered in the tar crate before 0.4.36 for Rust. When symlinks are present in a TAR archive, extraction can create arbitrary CVE-2021-385127.5An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. HTTP/1 request smuggling (aka HRS) can occur, potentially lead CVE-2021-385139.8Certain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, RBS850 before