CVE-2013-4790 — Appsuite vulnerability

CWE-2553 documents3 sources
Severity
3.5LOWNVD
EPSS
0.3%
top 48.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Open-xchange Appsuite
Timeline
PublishedSep 5
Latest updateMay 17

Description

Open-Xchange AppSuite before 7.0.2 rev14, 7.2.0 before rev11, 7.2.1 before rev10, and 7.2.2 before rev9 relies on user-supplied data to predict the IMAP server hostname for an external domain name, which allows remote authenticated users to discover e-mail credentials of other users in opportunistic circumstances via a manual-mode association of a personal e-mail address with the hostname of a crafted IMAP server.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-c7w4-539g-cx4r: Open-Xchange AppSuite before 7↗2022-05-17
▶
CVEList
CVE-2013-4790: Open-Xchange AppSuite before 7↗2013-09-05
▶
CVE-2013-4790 — Open-xchange Appsuite vulnerability | cvebase