CVE-2014-2078

MEDIUM

Open-Xchange OX AppSuite <7.4.2-rev9 - Info Disclosure

Title source: llm

Description

The backend in Open-Xchange (OX) AppSuite 7.4.2 before 7.4.2-rev9 allows remote attackers to obtain sensitive information about user email addresses in opportunistic circumstances by leveraging a failure in e-mail auto configuration for external accounts.

References (2)

Core 2

Core References

Mitigation, Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/531502/100/0/threaded

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/92017

Scores

CVSS v3 5.3

EPSS 0.0019

EPSS Percentile 41.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-200

Status published

Products (1)

open-xchange/open-xchange_appsuite 7.4.2

Published Apr 10, 2018

Tracked Since Feb 18, 2026