Medium severity · published May 29, 2023
CVE-2020-29547
An issue was discovered in Citadel through webcit-926
5.9
CVSS
0.8%
EPSS
No
On KEV
Description
An issue was discovered in Citadel through webcit-926. Meddler-in-the-middle attackers can pipeline commands after POP3 STLS, IMAP STARTTLS, or SMTP STARTTLS commands, injecting cleartext commands into an encrypted user session. This can lead to credential disclosure.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WE
Webcit · Citadel
through 926 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-29547
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-29547
Issue Tracking
http://uncensored.citadel.org/dotgoto?room=Citadel%20Security
Vendor Advisory
http://uncensored.citadel.org/msg/4576039
More from Webcit
9.8
CVE-2020-27739
A Weak Session Management vulnerability in Citadel WebCit through 926 allows unauthenticated remote attackers to hijack recently logged-in users' sessions
6.5
CVE-2020-27742
An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's emails via the msg_confirm_move…
6.1
CVE-2020-27741
Multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit through 926 allow remote attackers to inject arbitrary web script or HTML via multiple pages and parameters
5.3
CVE-2020-27740
Citadel WebCit through 926 allows unauthenticated remote attackers to enumerate valid users within the platform
3.7
CVE-2021-37845
An issue was discovered in Citadel through webcit-932