CVE-2009-5033

Published: Dec 16, 2010Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle a "* *" argument sequence for a certain tell command, which allows remote authenticated users to obtain access to other users' data via a sync operation, related to storage of the data of multiple users within the same thread.

Affected (6)

Products: Ibm: Lotus Notes Traveler

1 product

Lotus Notes Traveler

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Lotus Notes Traveler	Up to 8.5.0.1
Ibm Lotus Notes Traveler	Version 8.0.1.2
Ibm Lotus Notes Traveler	Version 8.0.1.3
Ibm Lotus Notes Traveler	Version 8.0.1
Ibm Lotus Notes Traveler	Version 8.0
Ibm Lotus Notes Traveler	Version 8.5.0.0

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (8)

http://www-01.ibm.com/support/docview.wss?uid=swg24019529&aid=1

Source: cve@mitre.org

http://www-1.ibm.com/support/docview.wss?uid=swg1LO41040

Source: cve@mitre.org

Vendor Advisory

http://www-10.lotus.com/ldd/dominowiki.nsf/page.xsp?documentId=A6604E906E0DF2DF8525778B005D4466&action=openDocument

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/64742

Source: cve@mitre.org

http://www-01.ibm.com/support/docview.wss?uid=swg24019529&aid=1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-1.ibm.com/support/docview.wss?uid=swg1LO41040

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www-10.lotus.com/ldd/dominowiki.nsf/page.xsp?documentId=A6604E906E0DF2DF8525778B005D4466&action=openDocument

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/64742

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.