IBM Lotus Notes Traveler before 8.5.1.3 on the Nokia s60 device successfully performs a Replace Data operation for a prohibited application, which allows remote authenticated users to bypass intended access restrictions via this operation.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.