PT-2015-4126 · Ibm · Ibm Notes Traveler Companion

Published 2015-03-02 · Updated 2015-03-03 · CVE-2014-8921

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Notes Traveler Companion application versions 1.0 through 1.1 before 201411010515

Description The issue makes it easier for remote attackers to capture credentials by conducting a phishing attack involving an encrypted e-mail message, due to the improper restriction of the number of executions of the automatic configuration option.

Recommendations For IBM Notes Traveler Companion application versions 1.0 through 1.1 before 201411010515, update to a version after 201411010515 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2014-8921

Affected Products

Ibm Notes Traveler Companion

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-8921 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21690582 · Vendor Advisory