CVEvulnerability
CVE-2009-0809
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2009-03-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object.
Affected configurations
• 3ds enovia smarteam (<= 5.18)
• ibm catia (<= 5.18)
• ibm catia 5.16
• ibm catia 5.17
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/34037 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1HD80332 Vendor Advisory
- http://www.securityfocus.com/bid/33895 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/0525 Vendor Advisory
- http://secunia.com/advisories/34037 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1HD80332 Vendor Advisory
- http://www.securityfocus.com/bid/33895 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/0525 Vendor Advisory