CVE-2020-12619

CVE-2020-12619 describes a vulnerability in MailMate before version 1.11 where S/MIME certificates were automatically imported, allowing silent replacement of existing ones. This medium-severity vulnerability (CVSS 5.9) could enable a man-in-the-middle attacker to obtain an email-validated S/MIME certificate and replace a target's public key, leading to the deciphering of subsequent communications. The attack is low complexity, requiring only a single email, and results in high impact to integrity. While there is no known active exploitation or public exploit code, the vulnerability has received some community discussion and media coverage, indicating awareness within the security community.