CVE-2015-8542

An issue was discovered in Open-Xchange Guard before 2.2.0-rev8. The "getprivkeybyid" API call is used to download a PGP Private Key for a specific user after providing authentication credentials. Clients provide the "id" and "cid" parameter to specify the current user by its user- and context-ID...

Design/Logic Flaw

An issue was discovered in Open-Xchange Guard before 2.2.0-rev8. The "getprivkeybyid" API call is used to download a PGP Private Key for a specific user after providing authentication credentials. Clients provide the "id" and "cid" parameter to specify the current user by its user- and context-ID...

PT-2016-3924

Name of the Vulnerable Software and Affected Versions Open-Xchange Guard versions prior to 2.2.0-rev8 Description An issue in Open-Xchange Guard allows attackers to download PGP Private Keys of other users by exploiting the "getprivkeybyid" API call. This is possible when two users have the same...