← Back

CVE-2009-0809

nvd nist
Published: Mar 4, 2009Modified: Apr 23, 2026

JSON object

Loading...
3.5
Vector
AV:N/AC:M/Au:S/C:P/I:N/A:N
Exploitability: 6.8 / Impact: 2.9
Source: NVD

Description

The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object.

Affected (4)

Products: 3ds: Enovia Smarteam · Ibm: Catia
3ds
1 product
Enovia Smarteam
Ibm
1 product
Catia
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Enovia Smarteam
Up to 5.18
Ibm
Catia
Up to 5.18
Catia
Version 5.16
Catia
Version 5.17

Related CWEs

CWE-264
CWE-264

References (8)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.