exploitDog

CVE-2009-5035

Опубликовано: 16 дек. 2010

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

The Nokia client in IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle multiple outgoing e-mail messages between sync operations, which might allow remote attackers to read communications intended for other recipients by examining appended messages.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:lotus_notes_traveler:*:*:*:*:*:*:*:*

Версия до 8.5.0.1 (включая)

cpe:2.3:a:ibm:lotus_notes_traveler:8.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_traveler:8.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_traveler:8.0.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_traveler:8.0.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_notes_traveler:8.5.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 45%

0.00225

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-9jq9-g2pc-wwpm

github

почти 4 года назад

The Nokia client in IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle multiple outgoing e-mail messages between sync operations, which might allow remote attackers to read communications intended for other recipients by examining appended messages.

EPSS

Процентиль: 45%

0.00225

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-200