CVE-2020-15953

CVE-2020-15953 describes a STARTTLS buffering vulnerability in LibEtPan versions through 1.9.4, impacting products like MailCore 2. This flaw allows a man-in-the-middle attacker to inject malicious data into the TLS context during the "begin TLS" response for IMAP, SMTP, and POP3 protocols. With a CVSS score of 7.4 (High), this vulnerability has a network attack vector and high attack complexity, potentially leading to high confidentiality and integrity impacts without requiring user interaction. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.