Lucene search

MitreCVE-2020-9427

HistoryJun 15, 2020 - 3:15 p.m.

CVE-2020-9427

2020-06-1515:15:09

CWE-918

mitre

web.nvd.nist.gov

cve-2020-9427

ox guard

ssrf

security vulnerability

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

37.2%

JSON

OX Guard 2.10.3 and earlier allows SSRF.

Affected configurations

Nvd

Node

open-xchangeox_guardMatch2.10.3

VendorProductVersionCPE
open-xchangeox_guard2.10.3cpe:2.3:a:open-xchange:ox_guard:2.10.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
open-xchange	ox_guard	2.10.3	cpe:2.3:a:open-xchange:ox_guard:2.10.3:::::::*

References

packetstormsecurity.com/files/158069/OX-Guard-2.10.3-Cross-Site-Scripting-Server-Side-Request-Forgery.html

seclists.org/fulldisclosure/2020/Jun/20

www.open-xchange.com/

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

37.2%

JSON

Related for CVE-2020-9427