CVE-2013-4698: Infoleak
Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to obtain sensitive e-mail content intended for different persons in opportunistic circumstances by reading Subject header lines within the user's own mailbox.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4698?
CVE-2013-4698 is categorized as a moderate severity vulnerability due to its potential to expose sensitive email content.
How do I fix CVE-2013-4698?
Fixing CVE-2013-4698 involves updating your Cybozu Mailwise to the latest version that addresses the vulnerability.
What causes the vulnerability in CVE-2013-4698?
CVE-2013-4698 is caused by improper restrictions on accessing email Subject header lines, allowing authenticated users to view unintended email contents.
Who is affected by CVE-2013-4698?
CVE-2013-4698 affects users of Cybozu Mailwise versions 5.0.4 and 5.0.5.
What are the potential impacts of CVE-2013-4698?
The potential impacts of CVE-2013-4698 include unauthorized access to sensitive email information, which could lead to privacy breaches.