CVE-2020-29547

2023-05-2900:00:00

mitre

www.cve.org

cve-2020-29547

citadel

webcit-926

vulnerability

mitm attack

cleartext commands

credential disclosure

pop3

imap

smtp

0.001 Low

EPSS

Percentile

49.9%

JSON

An issue was discovered in Citadel through webcit-926. Meddler-in-the-middle attackers can pipeline commands after POP3 STLS, IMAP STARTTLS, or SMTP STARTTLS commands, injecting cleartext commands into an encrypted user session. This can lead to credential disclosure.