CVE-2013-1651
5.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:N
Exploitability: 8.6 / Impact: 4.9
Source: NVD
Description
OXUpdater in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof update servers and install arbitrary software via a crafted certificate.
Affected (3)
Products: Open Xchange: Open Xchange Server
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 6.20.7 |
Related CWEs
References (2)
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Timeline
No history available yet.