CVE-2021-38373
In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless "Server requires authentication" is checked.
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for kmailtransport in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerability: 1
In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless "Server requires authentication" is checked.
Check your installed stack and versions against the current vulnerability feeds.