CVE-2011-0290

CVE-2011-0290 describes a vulnerability in the BlackBerry Collaboration Service within RIM BlackBerry Enterprise Server (BES) versions 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino. This flaw allows remote authenticated users to gain unauthorized access to arbitrary user accounts within the same organization. Attackers could then read or send messages, access contact lists, or cause a denial of service by rendering logins unavailable. The vulnerability has a CVSS score of 6.5, indicating a medium severity. It is exploitable over the network with low attack complexity, requiring authentication, and can lead to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. The CVE has received minimal community discussion and media coverage, suggesting low public awareness or interest.