Lucene search
HistoryOct 03, 2022 - 4:24 p.m.
CVE-2009-0809
dassault systemes
enovia smarteam
security vulnerability
cve-2009-0809
document class
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.9%
The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object.
Affected configurations
Node
3dsenovia_smarteamRange≤5.18
ORibmcatiaRange≤5.18
ORibmcatiaMatch5.16
ORibmcatiaMatch5.17
Related
prion
prion
Design/Logic Flaw
2009-03-04 17:30:00
cvelist
cvelist
CVE-2009-0809
2022-10-03 16:24:10
nvd
nvd
CVE-2009-0809
2009-03-04 17:30:02
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.9%
Related for CVE-2009-0809