CVE-2020-12643: Medium severity open-xchange app suite backend vulnerability
Published Aug 31, 2020
·Updated
OX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request for a snippet containing an email address.
Affected Software
1 affected component
Open-Xchange Open-Xchange AppSuite<=7.10.3
Event History
Aug 31, 2020
CVE Published
via MITRE·02:24 PM
Data Sourced
via MITRE·02:24 PM
Description
Frequently Asked Questions
1
What is CVE-2020-12643?
CVE-2020-12643 is a vulnerability in OX App Suite 7.10.3 and earlier that allows incorrect access control through an /api/subscriptions request.
2
What is the severity of CVE-2020-12643?
The severity of CVE-2020-12643 is medium, with a severity value of 4.3.
3
How does CVE-2020-12643 affect OX App Suite?
CVE-2020-12643 affects OX App Suite 7.10.3 and earlier versions.
4
How can I fix CVE-2020-12643 in OX App Suite?
To fix CVE-2020-12643 in OX App Suite, update to a version later than 7.10.3.
5
Where can I find more information about CVE-2020-12643?
For more information about CVE-2020-12643, you can refer to the following sources: [SecLists](http://seclists.org/fulldisclosure/2020/Aug/14) and [Open-Xchange](https://www.open-xchange.com/).