CVE-2013-5935

The Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 does not properly restrict the set of network interfaces that can receive API calls, which makes it easier for remote attackers to obtain access by sending network traffic from an unintended...

PT-2013-5874

Name of the Vulnerable Software and Affected Versions Open-Xchange AppSuite versions 7.0.x through 7.0.2-rev14 Open-Xchange AppSuite versions 7.2.x through 7.2.2-rev15 Description The issue is related to a hardcoded password for node join operations in the source code. This allows remote attacker...

CVE-2013-5934: Undefined Security Weakness

Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 has a hardcoded password for node join operations, which allows remote attackers to expand a cluster by finding this password in the source code and then sending the password in a Hazelcast cluster API call, a different...

PT-2013-5875

Name of the Vulnerable Software and Affected Versions Open-Xchange AppSuite versions 7.0.0 through 7.0.2-rev14 Open-Xchange AppSuite versions 7.2.0 through 7.2.2-rev15 Description The issue is related to the Hazelcast cluster API, which does not properly restrict the set of network interfaces tha...

CVE-2013-5935: Exposure of Sensitive Information to an Unauthorized Actor

The Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 does not properly restrict the set of network interfaces that can receive API calls, which makes it easier for remote attackers to obtain access by sending network traffic from an unintended...

CVE-2013-5936: Exposure of Sensitive Information to an Unauthorized Actor

The Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 allows remote attackers to obtain sensitive information about 1 runtime activity, 2 network configuration, 3 user sessions, 4 the memcache interface, and 5 the REST interface via API calls suc...

PT-2013-5444

Name of the Vulnerable Software and Affected Versions Open-Xchange AppSuite versions 7.0.0 through 7.0.2-rev14 Open-Xchange AppSuite versions 7.2.0 through 7.2.2-rev15 Description The issue concerns the REST and memcache interfaces in the Hazelcast cluster API, which do not require authentication...

PT-2013-5876

Name of the Vulnerable Software and Affected Versions Open-Xchange AppSuite versions 7.0.x through 7.0.2-rev14 Open-Xchange AppSuite versions 7.2.x through 7.2.2-rev15 Description The issue allows remote attackers to obtain sensitive information about runtime activity, network configuration, user...

Open-Xchange AppSuite 7.2.2 Improper Authentication / Information Disclosure

Product: Open-Xchange AppSuite Vendor: Open-Xchange GmbH Internal reference: 28260 Bug ID Vulnerability type: CWE-16: Configuration, CWE-287: Improper Authentication, CWE-200: Information Exposure Vulnerable version: 7.0.0 to 7.2.2 Vulnerable component: backend default configuration Fixed version...

Hazelcast Memcached Interface Detection

The memcached interface for Hazelcast, an open source data clustering solution, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67023; scriptversion"1.2"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Hazelcast Memcached Interfac...

Hazelcast Wire Protocol Detection

The wire protocol for Hazelcast, an open source data clustering solution, was found listening on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67022; scriptversion"1.2"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Hazelcast Wire Protocol...

Hazelcast REST Interface Detection

The REST interface for Hazelcast, an open source data clustering solution, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67024; scriptversion"1.2"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Hazelcast REST Interface...