Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
putmail.py in Putmail before 1.4 does not detect when a user attempts to use TLS with a server that does not support it, which causes putmail.py to send the username and password in plaintext while the user believes encryption is in use, and allows remote attackers to obtain sensitive information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Putmail putmail.py 身份认证漏洞
Vulnerability Description
当用户试图通过不支持该功能的服务器使用TLS时，Putmail 1.4之前版本中的putmail.py没有对其进行检测 。这使得putmail.py会以明文的形式将用户名和密码发送出去，而用户以为使用了使用了加密。从而使得远程攻击者可以获得敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A