CVE-2017-17062 The backend component in Open-Xchange OX App Suite before 7.6.3-rev35, 7.8.x before 7.8.2-rev38, 7.8.3 before 7.8.3-rev41, and 7.8.4 before 7.8.4-rev19 allows remote authenticated users to save arbitr...
MediumCVSS 6.5
EPSS 3.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The backend component in Open-Xchange OX App Suite before 7.6.3-rev35, 7.8.x before 7.8.2-rev38, 7.8.3 before 7.8.3-rev41, and 7.8.4 before 7.8.4-rev19 allows remote authenticated users to save arbitrary user attributes by leveraging improper privilege management.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Open-Xchange GmbH open-xchange appsuite | <= 7.6.3 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.6.3-rev14 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.6.3-rev15 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.6.3-rev16 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.6.3-rev17 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.6.3-rev18 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.6.3-rev20 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.6.3-rev22 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.6.3-rev23 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.6.3-rev24 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.6.3-rev25 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.6.3-rev26 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.6.3-rev28 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.6.3-rev29 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.6.3-rev30 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.6.3-rev31 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.6.3-rev32 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.6.3-rev33 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.0 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.2 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev10 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev11 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev12 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev13 | No fix listed |
Show 46 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev14 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev15 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev16 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev17 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev18 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev19 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev20 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev21 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev22 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev23 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev24 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev25 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev26 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev27 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev28 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev29 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev30 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev31 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev32 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev33 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev34 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev35 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev36 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev38 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev39 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev40 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev5 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev6 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev8 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.3-rev9 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.4 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.4-rev10 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.4-rev11 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.4-rev13 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.4-rev14 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.4-rev15 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.4-rev16 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.4-rev17 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.4-rev18 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.4-rev3 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.4-rev4 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.4-rev5 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.4-rev6 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.4-rev7 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.4-rev8 | No fix listed |
| Open-Xchange GmbH open-xchange appsuite | = 7.8.4-rev9 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20180608 Open-Xchange Security Advisory 2018-06-08 exploit mailing-list third-party-advisory
- 44881 exploit third-party-advisory vdb-entry