NetSight
medium4.0

CVE-2010-4546

IBM Lotus Notes Traveler before 8.5.1.2 does not reject an attachment download request for an e-mail message with a Prevent Copy attribute, which allows remote…

Impact

IBM Lotus Notes Traveler before 8.5.1.2 does not reject an attachment download request for an e-mail message with a Prevent Copy attribute, which allows remote authenticated users to bypass intended access restrictions via this request.

Affected products

VendorProductAffected versions
IbmLotus Notes Traveler
through 8.5.1.1
Versions 8.0, 8.0.1, 8.0.1.2, 8.0.1.3, 8.5.0.0

Weakness classification

References