PT-2016-5820 · Open Xchange · Open-Xchange Appsuite

Publicado 2016-12-15 · Atualizado 2018-10-19 · CVE-2016-4048

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Open-Xchange OX App Suite versions prior to 7.8.1-rev11

Description An issue in the login screen notification mechanism for external users allows the injection of arbitrary text messages. This can be exploited for social engineering attacks, where users may be tricked into following instructions injected by third parties.

Recommendations For versions prior to 7.8.1-rev11, update to version 7.8.1-rev11 or later to resolve the issue. As a temporary workaround, consider restricting the ability to inject custom messages at the login screen to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2016-4048

Produtos afetados

Open-Xchange Appsuite

Referências · 4

• https://osv.dev/vulnerability/CVE-2016-4048 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-4048 · Nota de Segurança
• http://securitytracker.com/id/1036157 · Nota
• http://securityfocus.com/archive/1/538732/100/0/threaded · Nota