CVE-2009-0809

EUVD-2009-0807
The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.5 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:S/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 40%
Affected Products (NVD)
VendorProductVersion
3dsenovia_smarteam
𝑥
≤ 5.18
ibmcatia
𝑥
≤ 5.18
ibmcatia
5.16
ibmcatia
5.17
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/34037
http://www-01.ibm.com/support/docview.wss?uid=swg1HD80332
http://www.securityfocus.com/bid/33895
http://www.vupen.com/english/advisories/2009/0525
http://secunia.com/advisories/34037
http://www-01.ibm.com/support/docview.wss?uid=swg1HD80332
http://www.securityfocus.com/bid/33895
http://www.vupen.com/english/advisories/2009/0525