Spoofing

2020-10-2305:15:00

PRIOn knowledge base

www.prio-n.com

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user (via the session API during shared Drive access).

CPENameOperatorVersion
open-xchange_appsuiteeq7.10.2
open-xchange_appsuiteeq7.10.3

CPE	Name	Operator	Version
	open-xchange_appsuite	eq	7.10.2
	open-xchange_appsuite	eq	7.10.3

References

seclists.org/fulldisclosure/2020/Oct/20

www.open-xchange.com/