CVE-2025-13052
Gravedad CVSS v4.0:
ALTA
Tipo:
CWE-295
Validación incorrecta de certificados
Fecha de publicación:
12/12/2025
Última modificación:
12/12/2025
Descripción
*** Pendiente de traducción *** When the user set the Notification&#39;s sender to send emails to the SMTP server via msmtp, an improper validated TLS/SSL certificates allows an attacker who can intercept network traffic between the SMTP client and server to execute a man-in-the-middle (MITM) attack, which may obtain the sensitive information of the SMTP.<br />
<br />
Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RKD2 as well as from ADM 5.0.0 through ADM 5.1.0.RN42.
Impacto
Puntuación base 4.0
7.00
Gravedad 4.0
ALTA