CVE-2013-4698

Name of the Vulnerable Software and Affected Versions Cybozu Mailwise versions 5.0.4 through 5.0.5

Description The issue allows remote authenticated users to obtain sensitive e-mail content intended for different persons by reading Subject header lines within the user's own mailbox in opportunistic circumstances.

Recommendations For Cybozu Mailwise versions 5.0.4 and 5.0.5, consider restricting access to the mailbox until a patch is available to prevent unauthorized reading of sensitive e-mail content.