CVE-2013-5936: Infoleak
First published: Wed Sep 25 2013(Updated: )
The Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 allows remote attackers to obtain sensitive information about (1) runtime activity, (2) network configuration, (3) user sessions, (4) the memcache interface, and (5) the REST interface via API calls such as a hazelcast/rest/cluster/ call, a different vulnerability than CVE-2013-5200.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Open-xchange Open-xchange Appsuite | =7.0.1 | |
| Open-xchange Open-xchange Appsuite | =7.0.2 | |
| Open-xchange Open-xchange Appsuite | =7.2.0 | |
| Open-xchange Open-xchange Appsuite | =7.2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/open-xchange
- canonical/open-xchange open-xchange appsuite
- version/open-xchange open-xchange appsuite/7.0.1
- version/open-xchange open-xchange appsuite/7.0.2
- version/open-xchange open-xchange appsuite/7.2.0
- version/open-xchange open-xchange appsuite/7.2.1