VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 25, 2013· Updated Jun 16, 2026

CVE-2013-5936

CVE-2013-5936

Description

The Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 allows remote attackers to obtain sensitive information about (1) runtime activity, (2) network configuration, (3) user sessions, (4) the memcache interface, and (5) the REST interface via API calls such as a hazelcast/rest/cluster/ call, a different vulnerability than CVE-2013-5200.

Affected products

5
  • Open-Xchange/Appsuite5 versions
    cpe:2.3:a:open-xchange:open-xchange_appsuite:7.0.1:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:open-xchange:open-xchange_appsuite:7.2.1:*:*:*:*:*:*:*
    • (no CPE)range: <7.0.2-rev15, <7.2.2-rev16

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.