We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig for retrieving the configuration. This is related to kmail-account-wizard.
Reserved 2024-10-27 | Published 2024-10-27 | Updated 2024-10-30 | Assigner mitrebugs.kde.org/show_bug.cgi?id=487882
kde.org/announcements/megarelease/6/
invent.kde.org/pim/kmail/-/tags
invent.kde.org/...t/9784f5ab41c3aff435d4a88afb25585180a62ee4
Support options
