CVE-2009-0809 in ENOVIA SmarTeam
Summary
by MITRE
The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object.
Once again VulDB remains the best source for vulnerability data.
Analysis
by VulDB Data Team • 12/06/2017
The vulnerability identified as CVE-2009-0809 affects Dassault Systemes ENOVIA SmarTeam V5 products including CATIA and other related systems. This represents a significant information disclosure flaw that undermines the security controls designed to protect sensitive user and document data within enterprise product development environments. The issue stems from improper access control mechanisms that fail to adequately verify user permissions when accessing profile card information associated with document objects.
The technical flaw manifests through a specific weakness in the Web Editor component where authenticated users can exploit a design oversight to access profile card data of objects within the document class. This occurs when a malicious user receives a specially crafted link from the document owner, which bypasses normal access controls and allows unauthorized reading of sensitive profile information. The vulnerability exists because the system does not properly validate the requesting user's authorization level against the target object's security settings, creating a path for privilege escalation through social engineering or link manipulation techniques.
The operational impact of this vulnerability extends beyond simple data exposure, as profile card information often contains sensitive metadata about document ownership, creation dates, modification histories, and user identification details that could be leveraged for further attacks. Attackers could potentially use this information to map user roles and permissions within the system, identify key personnel, or craft more sophisticated social engineering campaigns. The vulnerability affects multiple products in the Dassault Systemes ecosystem, indicating a systemic design flaw that requires comprehensive remediation across affected platforms. This issue particularly impacts organizations using these systems for collaborative product development where intellectual property protection and user privacy are paramount.
Organizations should implement immediate mitigations including applying the vendor-supplied patches for Service Pack 8 or equivalent updates, reviewing and tightening access control policies for document objects, and implementing network segmentation to limit exposure. The vulnerability aligns with CWE-284 Access Control Issues, specifically related to insufficient access control enforcement, and maps to ATT&CK technique T1078 Valid Accounts for maintaining persistent access. Additionally, organizations should conduct thorough security assessments of their product development environments to identify similar access control weaknesses and implement proper logging and monitoring to detect unauthorized access attempts. Regular security training for users on recognizing suspicious links and proper document sharing protocols can further reduce the risk of exploitation through social engineering vectors.