exploitDog

CVE-2014-8921

Опубликовано: 02 мар. 2015

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

The IBM Notes Traveler Companion application 1.0 and 1.1 before 201411010515 for Window Phone, as distributed in IBM Notes Traveler 9.0.1, does not properly restrict the number of executions of the automatic configuration option, which makes it easier for remote attackers to capture credentials by conducting a phishing attack involving an encrypted e-mail message.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21690582
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21690582
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:notes_traveler_companion:1.0:*:*:*:*:windows_phone:*:*

cpe:2.3:a:ibm:notes_traveler_companion:1.1:*:*:*:*:windows_phone:*:*

EPSS

Процентиль: 73%

0.00749

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-cj4w-9xfh-m2w2

github

больше 3 лет назад

The IBM Notes Traveler Companion application 1.0 and 1.1 before 201411010515 for Window Phone, as distributed in IBM Notes Traveler 9.0.1, does not properly restrict the number of executions of the automatic configuration option, which makes it easier for remote attackers to capture credentials by conducting a phishing attack involving an encrypted e-mail message.

EPSS

Процентиль: 73%

0.00749

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-200