CVE-2013-1649: Medium severity Open-Xchange Open-Xchange Server vulnerability
Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 uses the crypt and SHA-1 algorithms for password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1649?
CVE-2013-1649 has a medium severity rating due to its potential to expose cleartext passwords through brute-force attacks.
How do I fix CVE-2013-1649?
To fix CVE-2013-1649, update Open-Xchange Server to a version that uses stronger password hashing algorithms.
What versions are affected by CVE-2013-1649?
CVE-2013-1649 affects Open-Xchange Server versions 6.20.7 before rev14, 6.22.0 before rev13, and 6.22.1 before rev14.
What kind of attack does CVE-2013-1649 enable?
CVE-2013-1649 enables context-dependent attackers to obtain cleartext passwords via a brute-force attack.
Is my Open-Xchange Server vulnerable if I am using a supported version?
If you are using a version prior to the recommended updates for Open-Xchange Server, you are vulnerable to CVE-2013-1649.