← Database

CVE-2021-38373

MEDIUM CVSS: 5.3 Published: 2021-08-10 Modified: 2026-06-17

Description

In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless "Server requires authentication" is checked.

Affected Platforms

Kde Kmail

Weakness Type

CWE-77, CWE-319

References