CVE-2009-5032: IBM Lotus Notes Traveler

Medium severity, CVSS 5.8. EPSS: 1.1% chance of exploitation in the next 30 days.

The encrypted e-mail feature in IBM Lotus Notes Traveler before 8.5.0.2 sends unencrypted messages when the feature is used without uploading a Notes ID file, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.

Affected products

• IBM Lotus Notes Traveler: up to and including 8.5.0.1; version 8.0 only; version 8.0.1 only; version 8.0.1.2 only; version 8.0.1.3 only; version 8.5.0.0 only

Published 2010-12-16. Last modified 2026-06-16.