CVE-2021-37845
CVE-2021-37845 is a low-severity vulnerability in Citadel Webcit with a CVSS 3.x base score of 3.7. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Low (CVSS 3.x base score 3.7)
- EPSS exploit prediction: 1% (47th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Citadel Webcit
- Published:
- Last modified:
Description
An issue was discovered in Citadel through webcit-932. A meddler-in-the-middle attacker can fixate their own session during the cleartext phase before a STARTTLS command (a violation of "The STARTTLS command is only valid in non-authenticated state." in RFC2595). This potentially allows an attacker to cause a victim's e-mail messages to be stored into an attacker's IMAP mailbox, but depends on details of the victim's client behavior.
Frequently asked questions
- What is CVE-2021-37845?
- An issue was discovered in Citadel through webcit-932. A meddler-in-the-middle attacker can fixate their own session during the cleartext phase before a STARTTLS command (a violation of "The STARTTLS command is only valid in non-authenticated state." in RFC2595). This potentially allows an attacker to cause a victim's e-mail messages to be stored into an attacker's IMAP mailbox, but depends on details of the victim's client behavior.
- How severe is CVE-2021-37845?
- CVE-2021-37845 has a CVSS 3.x base score of 3.7, rated low severity. It is exploitable over network with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.
- Is CVE-2021-37845 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (47th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2021-37845?
- CVE-2021-37845 affects Citadel Webcit. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2021-37845?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2021-37845 published?
- CVE-2021-37845 was published on 2023-05-29 and last updated on 2026-06-17.
References
- http://uncensored.citadel.org/dotgoto?room=Citadel%20Security
- https://nostarttls.secvuln.info/
- https://uncensored.citadel.org/msg/2099264259
Affected products (1)
- cpe:2.3:a:citadel:webcit:*:*:*:*:*:*:*:*
More vulnerabilities in Citadel Webcit
- CVE-2020-27739 — Critical (CVSS 9.8): A Weak Session Management vulnerability in Citadel WebCit through 926 allows unauthenticated remote attackers to hijack…
- CVE-2009-0364 — High (CVSS 7.5): Format string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22, and other versions before 7.39,…
- CVE-2007-3821 — High (CVSS 7.5): Cross-site request forgery (CSRF) vulnerability in Webcit before 7.11 allows remote attackers to modify configurations…
- CVE-2020-27742 — Medium (CVSS 6.5): An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers…
- CVE-2020-27741 — Medium (CVSS 6.1): Multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit through 926 allow remote attackers to inject…
- CVE-2020-29547 — Medium (CVSS 5.9): An issue was discovered in Citadel through webcit-926. Meddler-in-the-middle attackers can pipeline commands after POP3…