Open-xchange OX App Suite Information Disclosure Vulnerability (CNVD-2021-90765)

Open-xchange OX App Suite is a web-based cloud desktop environment from Open-Xchange (Open-xchange), a US-based company that allows users to more intuitively manage email, tasks, files, etc. An information disclosure vulnerability exists in Open-xchange OX App Suite. An information disclosure vulnerability exists in Open-xchange OX App Suite, which stems from a caching mechanism that causes the “modifier” response to display the name of a person, which can be exploited to obtain the user’s name.