CVE-2013-5200 — Improper Authentication in Appsuite

CWE-287 — Improper AuthenticationCWE-200 — Sensitive Information Exposure12 documents3 sources
Severity
7.5HIGHNVD
NVD4.3NVD4.0
EPSS
0.5%
top 33.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Open-xchange Appsuite
Timeline
PublishedSep 25
Latest updateMay 17

Description

The (1) REST and (2) memcache interfaces in the Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 do not require authentication, which allows remote attackers to obtain sensitive information or modify data via an API call.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

8
GHSA
GHSA-mgg6-3fhx-cv73: The Hazelcast cluster API in Open-Xchange AppSuite 7↗2022-05-17
▶
GHSA
GHSA-x39v-5f2v-4j33: Open-Xchange AppSuite 7↗2022-05-17
▶
GHSA
GHSA-f6f5-p56q-68jm: The (1) REST and (2) memcache interfaces in the Hazelcast cluster API in Open-Xchange AppSuite 7↗2022-05-17
▶
GHSA
GHSA-qvcm-3pr4-v334: The Hazelcast cluster API in Open-Xchange AppSuite 7↗2022-05-17
▶
CVEList
CVE-2013-5200: The (1) REST and (2) memcache interfaces in the Hazelcast cluster API in Open-Xchange AppSuite 7↗2013-09-25
▶
CVE-2013-5200 — Improper Authentication in Appsuite | cvebase