CVE-2014-4757

The Outlook Extension in IBM Content Collector 4.0.0.x before 4.0.0.0-ICC-OE-IF004 allows local users to bypass the intended Reviewer privilege requirement and read e-mail messages from an arbitrary mailbox by invoking the Search function.

Score

CVSS 2.0 2.1 Low

Status

Modified - psirt@us.ibm.com

Published

2014-08-12

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Content Collector (Ibm)

References

• http://secunia.com/advisories/60619
• http://www-01.ibm.com/support/docview.wss?uid=swg21679144
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94456