CVE-2016-4046
Last modified
CVE-2016-4046 is a vulnerability of currently unknown severity. An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The API to configure external mail accounts can be abused to map and access network components within the trust boundary of the operator. EPSS estimates a 1.19% chance of exploitation in the next 30 days.
Description
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The API to configure external mail accounts can be abused to map and access network components within the trust boundary of the operator. Users can inject arbitrary hosts and ports to API calls. Depending on the response type, content and latency, information about existence of hosts and services can be gathered. Attackers can get internal configuration information about the infrastructure of an operator to prepare subsequent attacks.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Open-Xchange | Open-Xchange Appsuite | <= 7.8.1 | Rev9 |
References
- http://www.securitytracker.com/id/1036157Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036157Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-4046?
How severe is CVE-2016-4046?
How do I fix CVE-2016-4046?
Are you affected by CVE-2016-4046?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST