PT-2013-5142
CVE-2013-4698
·
تاريخ النشر
2013-08-16
·
تاريخ التحديث
2013-10-07
الوصف من
CVSS 2.0
3.5
منخفضةالمقاييسAV:N/AC:M/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Cybozu Mailwise versions 5.0.4 through 5.0.5
Description
The issue allows remote authenticated users to obtain sensitive e-mail content intended for different persons by reading Subject header lines within the user's own mailbox in opportunistic circumstances.
Recommendations
For Cybozu Mailwise versions 5.0.4 and 5.0.5, consider restricting access to the mailbox until a patch is available to prevent unauthorized reading of sensitive e-mail content.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾