Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f6f5-p56q-68jm

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The (1) REST and (2) memcache interfaces in the Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 do not require authentication, which allows remote attackers to obtain sensitive information or modify data via an API call.

The (1) REST and (2) memcache interfaces in the Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 do not require authentication, which allows remote attackers to obtain sensitive information or modify data via an API call.

EPSS

Процентиль: 66%
0.00514
Низкий

Дефекты

CWE-287

Связанные уязвимости

nvd
больше 12 лет назад

The (1) REST and (2) memcache interfaces in the Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 do not require authentication, which allows remote attackers to obtain sensitive information or modify data via an API call.

EPSS

Процентиль: 66%
0.00514
Низкий

Дефекты

CWE-287