CVE-2010-4549

IBM Lotus Notes Traveler before 8.5.1.3 on the Nokia s60 device successfully performs a Replace Data operation for a prohibited…

4.0MediumCVSS base score
1.2%Exploitation in 30 daysEPSS · top 33% of all CVEs
NoKnown exploitednot in CISA's KEV catalog
NonePublic exploitsnone known yet

Description

IBM Lotus Notes Traveler before 8.5.1.3 on the Nokia s60 device successfully performs a Replace Data operation for a prohibited application, which allows remote authenticated users to bypass intended access restrictions via this operation.

Timeline

2010
16 Dec 2010
16 Dec 2010
ID reserved
By mitre
16 Dec 2010
16 Dec 2010
Published
2024
16 Sept 202414 years later
16 Sept 2024· 14 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2010-4549, by who scored it
Scored by	CVSS	Score	Vector
NVDNVD · Modified	2.0	Medium4.0	AV:N/AC:L/Au:S/C:N/I:P/A:N

EPSS (exploitation in 30 days): 1.2% · top 33% of all CVEs (10 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.0.

Affected products

n/a
- affected n/a

References

LO53572 (opens in a new tab)vendor-advisoryx_refsource_AIXAPARx_transferred
http://www-10.lotus.com/ldd/dominowiki.nsf/page.xsp?documentId=A6604E906E0DF2DF8525778B005D4466&action=openDocument (opens in a new tab)x_refsource_CONFIRMx_transferred
http://www-10.lotus.com/ldd/dominowiki.nsf/dx/Lotus_Notes_Traveler_851_FP3_Release_Notes (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2010-4549](https://cveledger.app/badge/CVE-2010-4549.svg)](https://cveledger.app/cve/CVE-2010-4549)

Record last updated 16 Sept 2024, 16:17 UTC.