CVE-2021-23167

https://notcve.org/view.php?id=CVE-2021-23167

Improper certificate validation vulnerability in SMTP Client allows man-in-the-middle attack to retrieve sensitive information from the Command Centre Server. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 (MR3); 8.40 versions prior to 8.40.2063 (MR4); 8.30 versions prior to 8.30.1454 (MR4) ; version 8.20 and prior versions. Una vulnerabilidad de comprobación de certificados inapropiada en el cliente SMTP permite que un ataque de tipo man-in-the-middle recupere información confidencial del servidor del centro de mando. Este problema afecta a: Gallagher Command Centre versiones 8.50 anteriores a 8.50.2048 (MR3); versiones 8.40 anteriores a 8.40.2063 (MR4); versiones 8.30 anteriores a 8.30.1454 (MR4) ; versión 8.20 y anteriores • https://security.gallagher.com/Security-Advisories/CVE-2021-23167 • CWE-295: Improper Certificate Validation •