PT-2019-8641 · Open Xchange Gmbh · Ox Cloud Plugins

Publicado 2019-05-22 · Atualizado 2019-05-23 · CVE-2017-8777

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Open-Xchange GmbH OX Cloud Plugins version 1.4.0 and earlier

Description The issue is related to missing authorization.

Recommendations For Open-Xchange GmbH OX Cloud Plugins version 1.4.0 and earlier, update to a version later than 1.4.0 to resolve the issue.

Correção

Improper Authorization

Enumeração de Fraquezas

CWE-285

Identificadores relacionados

CVE-2017-8777

Produtos afetados

Ox Cloud Plugins

Referências · 5

• https://osv.dev/vulnerability/CVE-2017-8777 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-8777 · Nota de Segurança
• http://ox.com · Nota
• https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_4137_1.2.2_2017-05-12.pdf · Aviso do Fabricante
• http://open-xchange.com · Aviso do Fabricante