Oval Definition:	oval:org.opensuse.security:def:202138502
Revision Date: 2022-09-02 Version: 1 Title: CVE-2021-38502 Description: Thunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM could perform a downgrade attack to intercept transmitted messages, or could take control of the authenticated session to execute SMTP commands chosen by the MITM. If an unprotected authentication method was configured, the MITM could obtain the authentication credentials, too. This vulnerability affects Thunderbird < 91.2. Family: unix Class: vulnerability Status: Reference(s): Mitre CVE-2021-38502 SUSE CVE-2021-38502 SUSE-SU-2021:4150-1 openSUSE-SU-2021:1635-1 openSUSE-SU-2021:4150-1 Platform(s): openSUSE Leap 15.2 openSUSE Leap 15.3 openSUSE Leap 15.4 SUSE Linux Enterprise Desktop 15 SP2 SUSE Linux Enterprise Desktop 15 SP3 SUSE Linux Enterprise Desktop 15 SP4 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP4 Product(s): Definition Synopsis openSUSE Leap 15.2 is installed AND Package Information MozillaThunderbird-91.4.0-lp152.2.52.1 is installed AND MozillaThunderbird is signed with openSUSE key OR MozillaThunderbird-translations-common-91.4.0-lp152.2.52.1 is installed AND MozillaThunderbird-translations-common is signed with openSUSE key OR MozillaThunderbird-translations-other-91.4.0-lp152.2.52.1 is installed AND MozillaThunderbird-translations-other is signed with openSUSE key Definition Synopsis openSUSE Leap 15.3 is installed AND Package Information MozillaThunderbird-91.4.0-8.45.2 is installed AND MozillaThunderbird is signed with openSUSE key OR MozillaThunderbird-translations-common-91.4.0-8.45.2 is installed AND MozillaThunderbird-translations-common is signed with openSUSE key OR MozillaThunderbird-translations-other-91.4.0-8.45.2 is installed AND MozillaThunderbird-translations-other is signed with openSUSE key Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP2 is installed OR SUSE Linux Enterprise Server 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed OR SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information MozillaThunderbird-91.4.0-8.45.2 is installed OR MozillaThunderbird-translations-common-91.4.0-8.45.2 is installed OR MozillaThunderbird-translations-other-91.4.0-8.45.2 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP2 is installed OR SUSE Linux Enterprise Desktop 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP2 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Workstation Extension 15 SP2 is installed OR SUSE Linux Enterprise Workstation Extension 15 SP3 is installed AND Package Information MozillaThunderbird-91.4.0-8.45.2 is installed OR MozillaThunderbird-translations-common-91.4.0-8.45.2 is installed OR MozillaThunderbird-translations-other-91.4.0-8.45.2 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Workstation Extension 15 SP3 is installed AND Package Information MozillaThunderbird-91.4.0-8.45.2 is installed OR MozillaThunderbird-translations-common-91.4.0-8.45.2 is installed OR MozillaThunderbird-translations-other-91.4.0-8.45.2 is installed Definition Synopsis openSUSE Leap 15.4 is installed AND Package Information MozillaThunderbird-91.8.0-150200.8.65.1 is installed AND MozillaThunderbird is signed with openSUSE key OR MozillaThunderbird-translations-common-91.8.0-150200.8.65.1 is installed AND MozillaThunderbird-translations-common is signed with openSUSE key OR MozillaThunderbird-translations-other-91.8.0-150200.8.65.1 is installed AND MozillaThunderbird-translations-other is signed with openSUSE key Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP4 is installed OR SUSE Linux Enterprise Server 15 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed OR SUSE Linux Enterprise Workstation Extension 15 SP4 is installed AND Package Information MozillaThunderbird-91.8.0-150200.8.65.1 is installed OR MozillaThunderbird-translations-common-91.8.0-150200.8.65.1 is installed OR MozillaThunderbird-translations-other-91.8.0-150200.8.65.1 is installed
BACK