CVE-2009-5035

IBM Lotus Notes Traveler < 8.5.0.1 - Exposure of Sensitive Information via Nokia Client

Title source: llm

Description

The Nokia client in IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle multiple outgoing e-mail messages between sync operations, which might allow remote attackers to read communications intended for other recipients by examining appended messages.

References (2)

Core 2

Core References

Various Sources x_refsource_confirm

http://www-10.lotus.com/ldd/dominowiki.nsf/page.xsp?documentId=A6604E906E0DF2DF8525778B005D4466&action=openDocument

Vendor Advisory vendor-advisory x_refsource_aixapar

http://www-1.ibm.com/support/docview.wss?uid=swg1LO47028

Scores

EPSS 0.0097

EPSS Percentile 57.7%

Details

CWE

CWE-200

Status published

Products (6)

ibm/lotus_notes_traveler 8.0

ibm/lotus_notes_traveler 8.0.1

ibm/lotus_notes_traveler 8.0.1.2

ibm/lotus_notes_traveler 8.0.1.3

ibm/lotus_notes_traveler 8.5.0.0

ibm/lotus_notes_traveler < 8.5.0.1

Published Dec 16, 2010

Tracked Since Feb 18, 2026