CVE-2013-5200

Published: Sep 25, 2013Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The (1) REST and (2) memcache interfaces in the Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 do not require authentication, which allows remote attackers to obtain sensitive information or modify data via an API call.

Affected (4)

Products: Open Xchange: Open Xchange Appsuite

Open Xchange

1 product

Open Xchange Appsuite

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Open Xchange Open Xchange Appsuite	Version 7.0.1
Open Xchange Open Xchange Appsuite	Version 7.0.2
Open Xchange Open Xchange Appsuite	Version 7.2.0
Open Xchange Open Xchange Appsuite	Version 7.2.1

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

http://archives.neohapsis.com/archives/bugtraq/2013-09/0032.html

Source: cve@mitre.org

Exploit

http://archives.neohapsis.com/archives/bugtraq/2013-09/0032.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.