PT-2019-8641 · Open Xchange Gmbh · Ox Cloud Plugins

Published 2019-05-22 · Updated 2019-05-23 · CVE-2017-8777

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Open-Xchange GmbH OX Cloud Plugins version 1.4.0 and earlier

Description The issue is related to missing authorization.

Recommendations For Open-Xchange GmbH OX Cloud Plugins version 1.4.0 and earlier, update to a version later than 1.4.0 to resolve the issue.

Fix

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

CVE-2017-8777

Affected Products

Ox Cloud Plugins

References · 5

• https://osv.dev/vulnerability/CVE-2017-8777 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-8777 · Security Note
• https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_4137_1.2.2_2017-05-12.pdf · Vendor Advisory
• http://open-xchange.com · Vendor Advisory
• http://ox.com · Note