PT-2013-5874

Name of the Vulnerable Software and Affected Versions Open-Xchange AppSuite versions 7.0.x through 7.0.2-rev14 Open-Xchange AppSuite versions 7.2.x through 7.2.2-rev15 Description The issue is related to a hardcoded password for node join operations in the source code. This allows remote attacker...

PT-2013-5875

Name of the Vulnerable Software and Affected Versions Open-Xchange AppSuite versions 7.0.0 through 7.0.2-rev14 Open-Xchange AppSuite versions 7.2.0 through 7.2.2-rev15 Description The issue is related to the Hazelcast cluster API, which does not properly restrict the set of network interfaces tha...

CVE-2013-5934: Undefined Security Weakness

Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 has a hardcoded password for node join operations, which allows remote attackers to expand a cluster by finding this password in the source code and then sending the password in a Hazelcast cluster API call, a different...

CVE-2013-5936: Exposure of Sensitive Information to an Unauthorized Actor

The Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 allows remote attackers to obtain sensitive information about 1 runtime activity, 2 network configuration, 3 user sessions, 4 the memcache interface, and 5 the REST interface via API calls suc...

CVE-2013-5935: Exposure of Sensitive Information to an Unauthorized Actor

The Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 does not properly restrict the set of network interfaces that can receive API calls, which makes it easier for remote attackers to obtain access by sending network traffic from an unintended...