CVE-2013-5936 Information disclosure in n/a
Remote attackers can obtain sensitive runtime, network, and session information via unauthenticated API calls in Open-Xchange AppSuite.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-5936?
CVE-2013-5936 is a medium-severity vulnerability in Open-Xchange Open-Xchange Appsuite, published on 25 Sep 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 allows remote attackers to obtain sensitive information about (1) runtime activity, (2) network configuration, (3) user sessions, (4) the memcache interface, and (5) the REST interface via API calls such as a hazelcast/rest/cluster/ call, a different vulnerability than CVE-2013-5200.
Weakness: CWE-200
Which versions are affected by CVE-2013-5936?
It affects 1 product.
Products include Open-Xchange Open-Xchange Appsuite.
How do I fix CVE-2013-5936?
No fix has been published for CVE-2013-5936 yet. Limit exposure of the affected software until one is available.
Is CVE-2013-5936 being exploited?
There is no known exploitation of CVE-2013-5936 in the wild and no public exploit code.
Other vulnerabilities in Open-Xchange Open-Xchange Appsuite
Sources
Also known as GHSA-qvcm-3pr4-v334.