PT-2020-14735 · Kde+2 · Kde Kmail+2

Published 2020-07-27 · Updated 2020-08-25 · CVE-2020-15954

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions KDE KMail version 19.12.3 (aka 5.13.3)

Description The issue concerns unencrypted POP3 communication in KDE KMail, which occurs even when the UI indicates that encryption is being used.

Recommendations For version 19.12.3 (aka 5.13.3), consider configuring the email client to use encrypted communication protocols to mitigate the risk of unencrypted data transmission.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

ALT-PU-2020-2597

CVE-2020-15954

DLA-2300-1

MGASA-2020-0346

Affected Products

Alt Linux

Debian

Kde Kmail

References · 14

• https://cve.org/CVERecord?id=CVE-2020-15954 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-15954 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-15954 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-15954 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-15954 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15954 · Vendor Advisory
• https://debian.org/lts/security/2020/dla-2300 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2020-0346.html · Security Note
• https://bugs.kde.org/show_bug.cgi?id=423426 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2020-0346 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2300-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15954 · Security Note
• https://bugs.mageia.org/show_bug.cgi?id=27035 · Note
• https://lists.debian.org/debian-lts-announce/2020/07/msg00030.html · Note