CVE-2013-4698

Published: Aug 16, 2013Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to obtain sensitive e-mail content intended for different persons in opportunistic circumstances by reading Subject header lines within the user's own mailbox.

Affected (2)

Products: Cybozu: Mailwise

Cybozu

1 product

Mailwise

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Cybozu Mailwise	Version 5.0.4
Cybozu Mailwise	Version 5.0.5

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (8)

http://cs.cybozu.co.jp/information/20130812up02.php

Source: vultures@jpcert.or.jp

Vendor Advisory

http://jvn.jp/en/jp/JVN21103639/374951/index.html

Source: vultures@jpcert.or.jp

http://jvn.jp/en/jp/JVN21103639/index.html

Source: vultures@jpcert.or.jp

http://jvndb.jvn.jp/jvndb/JVNDB-2013-000077

Source: vultures@jpcert.or.jp

http://cs.cybozu.co.jp/information/20130812up02.php

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://jvn.jp/en/jp/JVN21103639/374951/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://jvn.jp/en/jp/JVN21103639/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://jvndb.jvn.jp/jvndb/JVNDB-2013-000077

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.