CVE-2013-5935: Infoleak

Published Sep 25, 2013

Updated

The Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 does not properly restrict the set of network interfaces that can receive API calls, which makes it easier for remote attackers to obtain access by sending network traffic from an unintended location, a different vulnerability than CVE-2013-5200.

Affected Software

4 affected components

Open-Xchange Open-Xchange AppSuite=7.0.1

Open-Xchange Open-Xchange AppSuite=7.0.2

Open-Xchange Open-Xchange AppSuite=7.2.0

Open-Xchange Open-Xchange AppSuite=7.2.1

Event History

Sep 25, 2013

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-5935?

CVE-2013-5935 is classified as a medium severity vulnerability due to its potential to allow unauthorized access.

How do I fix CVE-2013-5935?

To fix CVE-2013-5935, upgrade Open-Xchange AppSuite to versions 7.0.2-rev15 or 7.2.2-rev16 or later.

Who is affected by CVE-2013-5935?

CVE-2013-5935 affects users running Open-Xchange AppSuite versions 7.0.1, 7.0.2, 7.2.0, and 7.2.1.

What kind of attack does CVE-2013-5935 allow?

CVE-2013-5935 allows remote attackers to send network traffic that may gain unauthorized access to the Hazelcast cluster API.

Is there a workaround for CVE-2013-5935?

No official workaround is provided for CVE-2013-5935, so upgrading to the fixed versions is recommended.