PT-2013-5142 · Cybozu · Cybozu Mailwise

Publicado 2013-08-16 · Atualizado 2013-10-07 · CVE-2013-4698

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cybozu Mailwise versions 5.0.4 through 5.0.5

Description The issue allows remote authenticated users to obtain sensitive e-mail content intended for different persons by reading Subject header lines within the user's own mailbox in opportunistic circumstances.

Recommendations For Cybozu Mailwise versions 5.0.4 and 5.0.5, consider restricting access to the mailbox until a patch is available to prevent unauthorized reading of sensitive e-mail content.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2013-4698

Produtos afetados

Cybozu Mailwise

Referências · 5

• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000077 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4698 · Nota de Segurança
• http://cs.cybozu.co.jp/information/20130812up02.php · Aviso do Fabricante
• http://jvn.jp/en/jp/JVN21103639/374951/index.html · Nota
• http://jvn.jp/en/jp/JVN21103639/index.html · Nota