PT-2020-14568 · Mozilla+3 · Thunderbird+3

Magnus Melin · Published 2020-06-30 · Updated 2021-07-21 · CVE-2020-15646

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 68.10.0

Description The issue arises when an attacker intercepts Thunderbird's initial attempt to set up an account automatically using the Microsoft Exchange autodiscovery mechanism. If the attacker sends a crafted response, Thunderbird will send the username and password over https to a server controlled by the attacker.

Recommendations For versions prior to 68.10.0, update to version 68.10.0 or later to resolve the issue. As a temporary workaround, consider disabling the autodiscovery mechanism for Microsoft Exchange until a patch is applied. Restrict access to sensitive information and avoid using automatic account setup features until the issue is resolved.

Exploit

Fix

Related Identifiers

ALT-PU-2020-2709

ALT-PU-2020-2934

ALT-PU-2021-1369

CESA-2020_3038

CVE-2020-15646

DSA-4718-1

RHSA-2020:2906

RHSA-2020:2907

RHSA-2020:2966

RHSA-2020:3038

RHSA-2020:3046

RHSA-2020_2906

RHSA-2020_2966

RHSA-2020_3038

Affected Products

Alt Linux

Centos

Red Hat

Thunderbird

References · 20

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_jit_use_after_free.rb · Exploit
• 🔥 https://github.com/aleksejspopovs/cve-2020-16012 · Exploit
• 🔥 https://github.com/rojhack/CVE-2020-6514 · Exploit
• 🔥 https://github.com/hasan-khalil/CVE-2020-6514 · Exploit
• 🔥 https://github.com/HassanAzze/CVE-2020-6514 · Exploit
• 🔥 https://github.com/R0jhack/CVE-2020-6514 · Exploit
• 🔥❌ https://github.com/marcinguy/CVE-2020-15999 · Exploit, Deleted
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-15646 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2020-26/#CVE-2020-15646 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15646 · Security Note
• https://bugzilla.mozilla.org/show_bug.cgi?id=1606610 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-15646 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15646 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15646 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2020-26 · Vendor Advisory