CVEvulnerability

CVE-2013-5200

7.5 HIGH Published 2013-09-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-09-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-287

Description

The (1) REST and (2) memcache interfaces in the Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 do not require authentication, which allows remote attackers to obtain sensitive information or modify data via an API call.

Affected configurations

• open-xchange open-xchange appsuite 7.0.1 • open-xchange open-xchange appsuite 7.0.2 • open-xchange open-xchange appsuite 7.2.0 • open-xchange open-xchange appsuite 7.2.1

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References