Debian/kmail-account-wizard: medium 5.9
ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.ex
Action: Upgrade kmail-account-wizard to 4:24.12.0-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4:24.12.0-2 | - |
Fixed versions
| 4:24.12.0-2 |
Sources
- osv: DEBIAN-CVE-2024-50624#Debian:13/kmail-account-wizard
- https://security-tracker.debian.org/tracker/CVE-2024-50624
published · modified · JSON