First published: Wed Jul 11 2018(Updated: )
IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to bypass the remote image filtering mechanism and obtain sensitive information via a crafted e-mail message. IBM X-Force ID: 83371.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Lotus iNotes | =8.0.0.0 | |
IBM Lotus iNotes | =8.0.1.0 | |
IBM Lotus iNotes | =8.0.2.0 | |
IBM Lotus iNotes | =8.5.0.0 | |
IBM Lotus iNotes | =8.5.1.0 | |
IBM Lotus iNotes | =8.5.2.0 | |
IBM Lotus iNotes | =8.5.3.0 | |
IBM Lotus iNotes | =9.0.0.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-0589 is considered a medium severity vulnerability due to its ability to expose sensitive information.
To fix CVE-2013-0589, upgrade IBM iNotes to version 8.5.3 Fix Pack 6 or later, or 9.0.1 or later.
CVE-2013-0589 affects IBM iNotes versions 8.0.0.0, 8.0.1.0, 8.0.2.0, 8.5.0.0, 8.5.1.0, 8.5.2.0, and 8.5.3.0, as well as 9.0.0.0.
Yes, CVE-2013-0589 can be exploited remotely through crafted e-mail messages.
The impact of CVE-2013-0589 is that it allows remote attackers to bypass image filtering and access sensitive information.