VulnerableCode Package Details - pkg:rpm/redhat/thunderbird@68.10.0-1?arch=el6

Search for packages

Vulnerability	Summary	Fixed by
VCID-61fy-4yzm-uyhu Aliases: CVE-2020-15646	If an attacker intercepts Thunderbird's initial attempt to perform automatic account setup using the Microsoft Exchange autodiscovery mechanism, and the attacker sends a crafted response, then Thunderbird sends username and password over https to a server controlled by the attacker.	There are no reported fixed by versions.
VCID-72hn-2x6h-tbde Aliases: CVE-2020-12421	Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code.	There are no reported fixed by versions.
VCID-b4fq-m97e-eybr Aliases: CVE-2020-12418	Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code.	There are no reported fixed by versions.
VCID-fsvy-jfhn-1ydz Aliases: CVE-2020-12419	Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code.	There are no reported fixed by versions.
VCID-mmvb-w19n-97a3 Aliases: CVE-2020-12420	Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code.	There are no reported fixed by versions.

Vulnerability

Summary

Fixed by

VCID-61fy-4yzm-uyhu
Aliases:
CVE-2020-15646

If an attacker intercepts Thunderbird's initial attempt to perform automatic account setup using the Microsoft Exchange autodiscovery mechanism, and the attacker sends a crafted response, then Thunderbird sends username and password over https to a server controlled by the attacker.