CVE-2013-2582

2013-09-0511:44:57

CWE-94

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.002

Percentile

52.5%

JSON

CRLF injection vulnerability in the redirect servlet in Open-Xchange AppSuite and Server before 6.22.0 rev15, 6.22.1 before rev17, 7.0.1 before rev6, and 7.0.2 before rev7 allows remote attackers to inject arbitrary HTTP headers and conduct open redirect attacks by leveraging improper sanitization of whitespace characters.

Affected configurations

Nvd

Node

open-xchangeopen-xchange_appsuiteMatch6.22.0

open-xchangeopen-xchange_appsuiteMatch6.22.1

open-xchangeopen-xchange_appsuiteMatch7.0.1

open-xchangeopen-xchange_appsuiteMatch7.0.2

open-xchangeopen-xchange_serverMatch6.22.0

open-xchangeopen-xchange_serverMatch6.22.1

open-xchangeopen-xchange_serverMatch7.0.1

open-xchangeopen-xchange_serverMatch7.0.2

VendorProductVersionCPE
open-xchangeopen-xchange_appsuite6.22.0cpe:2.3:a:open-xchange:open-xchange_appsuite:6.22.0:*:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite6.22.1cpe:2.3:a:open-xchange:open-xchange_appsuite:6.22.1:*:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite7.0.1cpe:2.3:a:open-xchange:open-xchange_appsuite:7.0.1:*:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite7.0.2cpe:2.3:a:open-xchange:open-xchange_appsuite:7.0.2:*:*:*:*:*:*:*
open-xchangeopen-xchange_server6.22.0cpe:2.3:a:open-xchange:open-xchange_server:6.22.0:*:*:*:*:*:*:*
open-xchangeopen-xchange_server6.22.1cpe:2.3:a:open-xchange:open-xchange_server:6.22.1:*:*:*:*:*:*:*
open-xchangeopen-xchange_server7.0.1cpe:2.3:a:open-xchange:open-xchange_server:7.0.1:*:*:*:*:*:*:*
open-xchangeopen-xchange_server7.0.2cpe:2.3:a:open-xchange:open-xchange_server:7.0.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
open-xchange	open-xchange_appsuite	6.22.0	cpe:2.3:a:open-xchange:open-xchange_appsuite:6.22.0:::::::*
open-xchange	open-xchange_appsuite	6.22.1	cpe:2.3:a:open-xchange:open-xchange_appsuite:6.22.1:::::::*
open-xchange	open-xchange_appsuite	7.0.1	cpe:2.3:a:open-xchange:open-xchange_appsuite:7.0.1:::::::*
open-xchange	open-xchange_appsuite	7.0.2	cpe:2.3:a:open-xchange:open-xchange_appsuite:7.0.2:::::::*
open-xchange	open-xchange_server	6.22.0	cpe:2.3:a:open-xchange:open-xchange_server:6.22.0:::::::*
open-xchange	open-xchange_server	6.22.1	cpe:2.3:a:open-xchange:open-xchange_server:6.22.1:::::::*
open-xchange	open-xchange_server	7.0.1	cpe:2.3:a:open-xchange:open-xchange_server:7.0.1:::::::*
open-xchange	open-xchange_server	7.0.2	cpe:2.3:a:open-xchange:open-xchange_server:7.0.2:::::::*