p PatchFirst

CVE-2024-50624

CVE-2024-50624

This page contains facts from public vulnerability sources. Check the original advisory before updating.

ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig for retrieving the configuration. This is related to kmail-account-wizard.

CVSS 5.9 · Medium · EPSS 0.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • kmail-account-wizard Debian:12

    Versions
    • 4:22.12.3-1
    Affected ranges
    • ECOSYSTEM: < 4:22.12.3-1+deb12u1

    Update to 4:22.12.3-1+deb12u1

  • kmail-account-wizard Debian:13

    Affected ranges
    • ECOSYSTEM: < 4:24.12.0-2

    Update to 4:24.12.0-2

  • kmail-account-wizard Debian:14

    Affected ranges
    • ECOSYSTEM: < 4:24.12.0-2

    Update to 4:24.12.0-2

  • kdepim Ubuntu:Pro:16.04:LTS

    Versions
    • 4:15.08.2-0ubuntu1
    • 4:15.12.1-1ubuntu6
    • 4:15.12.3-0ubuntu1
    • 4:15.12.3-0ubuntu1.1
    Affected ranges
    • ECOSYSTEM: < 4:15.12.3-0ubuntu1.1+esm1

    Update to 4:15.12.3-0ubuntu1.1+esm1

  • kmail-account-wizard Ubuntu:Pro:18.04:LTS

    Versions
    • 4:17.04.3-0ubuntu1
    • 4:17.08.3-0ubuntu1
    • 4:17.12.2-0ubuntu1
    • 4:17.12.3-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 4:17.12.3-0ubuntu1+esm1

    Update to 4:17.12.3-0ubuntu1+esm1

  • kmail-account-wizard Ubuntu:Pro:20.04:LTS

    Versions
    • 4:19.04.3-0ubuntu1
    • 4:19.04.3-0ubuntu2
    • 4:19.12.3-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 4:19.12.3-0ubuntu1+esm1

    Update to 4:19.12.3-0ubuntu1+esm1

  • kmail-account-wizard Ubuntu:Pro:22.04:LTS

    Versions
    • 4:21.08.1-0ubuntu1
    • 4:21.08.3-0ubuntu1
    • 4:21.11.80-0ubuntu1
    • 4:21.11.90-0ubuntu1
    • 4:21.12.0-0ubuntu1
    • 4:21.12.1-0ubuntu1
    • 4:21.12.2-0ubuntu1
    • 4:21.12.3-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 4:21.12.3-0ubuntu1+esm1

    Update to 4:21.12.3-0ubuntu1+esm1

  • kmail-account-wizard Ubuntu:Pro:24.04:LTS

    Versions
    • 4:23.08.1-0ubuntu1
    • 4:23.08.2-0ubuntu1
    • 4:23.08.3-0ubuntu1
    • 4:23.08.4-0ubuntu1
    • 4:23.08.5-0ubuntu1
    • 4:23.08.5-0ubuntu2
    • 4:23.08.5-0ubuntu3
    Affected ranges
    • ECOSYSTEM: < 4:23.08.5-0ubuntu3+esm1

    Update to 4:23.08.5-0ubuntu3+esm1

Original sources

Check your server →