Lucene search

CVE-2014-2391

🗓️ 24 Apr 2014 05:05:06Reported by mitreType

cve🔗 web.nvd.nist.gov👁 37 Views🌐 WEB

The password recovery service in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13 makes an improper decision about the sensitivity of a string representing a previously used but currently invalid password

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 7
NVD	CVE-2014-2391	24 Apr 201405:06	–	nvd
Prion	Input validation	24 Apr 201405:06	–	prion
Cvelist	CVE-2014-2391	17 Apr 201420:00	–	cvelist
seebug.org	Open-Xchange AppSuite信息泄露漏洞	14 Apr 201400:00	–	seebug
OpenVAS	Open-Xchange (OX) App Suite Multiple Security Bypass Vulnerabilities (Oct 2015)	6 Oct 201500:00	–	openvas
securityvulns	Open-Xchange security vulnerabilities	5 May 201400:00	–	securityvulns
securityvulns	Open-Xchange Security Advisory 2014-04-08	5 May 201400:00	–	securityvulns

Nvd

Node

open-xchange open-xchange_appsuiteRange≤7.2.2

open-xchange open-xchange_appsuiteMatch7.2.0

open-xchange open-xchange_appsuiteMatch7.2.1

open-xchange open-xchange_appsuiteMatch7.4.1

open-xchange open-xchange_appsuiteMatch7.4.2

Source	Link
securityfocus	www.securityfocus.com/archive/1/531762

Parameter	Position	Path	Description	CWE
password	query param	/password/recovery	Improper decision about the sensitivity of a string representing a previously used but currently invalid password leading to information disclosure.	CWE-200

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Apr 2014 05:06Current

6.6Medium risk

Vulners AI Score6.6

CVSS24.3

EPSS0.0023

CWE-200