4.3
CVE-2009-5035
- EPSS 0.97%
- Veröffentlicht 16.12.2010 20:00:16
- Zuletzt bearbeitet 16.06.2026 23:14:52
- Erkennungen
LoginThe Nokia client in IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle multiple outgoing e-mail messages between sync operations, which might allow remote attackers to read communications intended for other recipients by examining appended messages.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Lotus Notes Traveler Version <= 8.5.0.1
Ibm ≫ Lotus Notes Traveler Version 8.0
Ibm ≫ Lotus Notes Traveler Version 8.0.1
Ibm ≫ Lotus Notes Traveler Version 8.0.1.2
Ibm ≫ Lotus Notes Traveler Version 8.0.1.3
Ibm ≫ Lotus Notes Traveler Version 8.5.0.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.97% | 0.572 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
http://www-10.lotus.com/ldd/dominowiki.nsf/page.xsp?documentId=A6604E906E0DF2DF8525778B005D4466&action=openDocument
http://www-1.ibm.com/support/docview.wss?uid=swg1LO47028