CVE-2013-4698

2013-08-1601:00:00

jpcert

www.cve.org

cybozu mailwise

remote users

sensitive email

AI Score

6.1

Confidence

Low

EPSS

0.002

Percentile

52.4%

JSON

Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to obtain sensitive e-mail content intended for different persons in opportunistic circumstances by reading Subject header lines within the user’s own mailbox.

References

cs.cybozu.co.jp/information/20130812up02.php

jvn.jp/en/jp/JVN21103639/374951/index.html

jvn.jp/en/jp/JVN21103639/index.html

jvndb.jvn.jp/jvndb/JVNDB-2013-000077