CVE-2025-13052: An improper certificates validation vulnerability was found in the Notification settings of ADM
When the user set the Notification's sender to send emails to the SMTP server via msmtp, an improper validated TLS/SSL certificates allows an attacker who can intercept network traffic between the SMTP client and server to execute a man-in-the-middle (MITM) attack, which may obtain the sensitive information of the SMTP.
Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RKD2 as well as from ADM 5.0.0 through ADM 5.1.0.RN42.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13052?
CVE-2025-13052 is considered a critical vulnerability due to its potential to enable man-in-the-middle (MITM) attacks.
How do I fix CVE-2025-13052?
You can mitigate CVE-2025-13052 by ensuring proper TLS/SSL certificate validation configurations in your SMTP client.
What software versions are affected by CVE-2025-13052?
CVE-2025-13052 affects ADM versions between 4.1.0 and 4.3.3.RKD2 inclusive, and versions between 5.0.0 and 5.1.0 exclusive.
What type of attack does CVE-2025-13052 allow?
CVE-2025-13052 allows attackers to perform man-in-the-middle (MITM) attacks by intercepting network traffic.
What are the risks associated with CVE-2025-13052?
The risks of CVE-2025-13052 include unauthorized access to sensitive information transmitted over SMTP due to inadequate certificate validation.