Lucene search
HistoryOct 03, 2022 - 4:23 p.m.
CVE-2002-2202
cve-2002-2202
outlook express
email security
message retention
local user vulnerability
nvd
3.8 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:H/Au:S/C:C/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
30.2%
Outlook Express 6.0 does not delete messages from dbx files, even when a user empties the Deleted items folder, which allows local users to read other users email.
Affected configurations
Node
microsoftoutlook_expressMatch6.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:outlook_express | microsoft outlook express | eq | 6.0 |
3.8 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:H/Au:S/C:C/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
30.2%
Related for CVE-2002-2202