CVE-2016-6190

SOGo before 2.3.12 and 3.x before 3.1.1 does not restrict access to the UID and DTSTAMP attributes, which allows remote authenticated users to obtain sensitive information about appointments with the "View the Date & Time" restriction, as demonstrated by correlating UIDs and DTSTAMPs between all users.

• CWE-200

• http://www.openwall.com/lists/oss-security/2016/07/09/3Mailing List, VDB Entry
• https://github.com/inverse-inc/sogo/commit/717f45f640a2866b76a8984139391fae64339225Patch
• https://github.com/inverse-inc/sogo/commit/875a4aca3218340fd4d3141950c82c2ff45b343dPatch
• https://sogo.nu/bugs/view.php?id=3696Vendor Advisory
• http://www.openwall.com/lists/oss-security/2016/07/09/3Mailing List, VDB Entry
• https://github.com/inverse-inc/sogo/commit/717f45f640a2866b76a8984139391fae64339225Patch
• https://github.com/inverse-inc/sogo/commit/875a4aca3218340fd4d3141950c82c2ff45b343dPatch
• https://sogo.nu/bugs/view.php?id=3696Vendor Advisory

Published

Feb 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6184The Camera driver in Huawei Honor 4C smartphones with softwa…
• CVE-2016-6185The XSLoader::load method in XSLoader in Perl does not prope…7.8
• CVE-2016-6186Cross-site scripting (XSS) vulnerability in the dismissChang…
• CVE-2016-6187The apparmor_setprocattr function in security/apparmor/lsm.c…7.8
• CVE-2016-6188Memory leak in SOGo 2.3.7 allows remote attackers to cause a…6.5
• CVE-2016-6189Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.…4.3
• CVE-2016-6191Multiple cross-site scripting (XSS) vulnerabilities in the V…6.1
• CVE-2016-6192Buffer overflow in the Wi-Fi driver in Huawei P8 smartphones…
• CVE-2016-6193Buffer overflow in the Wi-Fi driver in Huawei P8 smartphones…
• CVE-2016-6195SQL injection vulnerability in forumrunner/includes/moderati…
• CVE-2016-6197fs/overlayfs/dir.c in the OverlayFS filesystem implementatio…
• CVE-2016-6198The filesystem layer in the Linux kernel before 4.5.5 procee…