Open-Xchange AppSuite Multiple Information Disclosure And Security Bypass Vulnerabilities

Bugtraq ID:	62311
Class:	Design Error
CVE:	CVE-2013-5200
Remote:	Yes
Local:	No
Published:	Sep 10 2013 12:00AM
Updated:	Sep 10 2013 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:
Not Vulnerable:

Open-Xchange AppSuite Multiple Information Disclosure And Security Bypass Vulnerabilities

Open-Xchange AppSuite is prone to multiple information-disclosure and security-bypass vulnerabilities.

An attacker may exploit these issues to obtain sensitive information and bypass certain security restrictions.

Open-Xchange AppSuite versions 7.0.0 through 7.2.2 are vulnerable.

Open-Xchange AppSuite Multiple Information Disclosure And Security Bypass Vulnerabilities

Attackers can exploit these issues using browser or readily available tools.

The following example data is available:

GET http://www.example.com:5701/hazelcast/rest/cluster/

Open-Xchange AppSuite Multiple Information Disclosure And Security Bypass Vulnerabilities

Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.

Open-Xchange AppSuite Multiple Information Disclosure And Security Bypass Vulnerabilities

References: