PT-2015-4126 · Ibm · Ibm Notes Traveler Companion

Publicado 2015-03-02 · Atualizado 2015-03-03 · CVE-2014-8921

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Notes Traveler Companion application versions 1.0 through 1.1 before 201411010515

Description The issue makes it easier for remote attackers to capture credentials by conducting a phishing attack involving an encrypted e-mail message, due to the improper restriction of the number of executions of the automatic configuration option.

Recommendations For IBM Notes Traveler Companion application versions 1.0 through 1.1 before 201411010515, update to a version after 201411010515 to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-8921

Produtos afetados

Ibm Notes Traveler Companion

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-8921 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21690582 · Aviso do Fabricante