description: offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks.
problem types: Other
affected:
{
product: offlineimap
vendor: offlineimap
versions:
status: affected, version: before 6.3.2
}