漏洞标题
N/A
漏洞描述信息
作为PDF导出的电子邮件存储在一个不考虑与之相关的用户帐户特定会话信息的缓存中。在缓存被清除之前，同一服务节点的用户可以在短时间内访问其他用户的电子邮件，如果它们被导出为PDF。成功利用需要良好的时机和多个请求参数的修改。请部署提供的更新和补丁版本。现在，PDF导出的缓存会在进行授权决策时考虑用户会话信息。目前尚无公开可用的利用方法。
CVSS信息
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
漏洞类别
信息暴露
漏洞标题
N/A
漏洞描述信息
E-Mails exported as PDF were stored in a cache that did not consider specific session information for the related user account. Users of the same service node could access other users E-Mails in case they were exported as PDF for a brief moment until caches were cleared. Successful exploitation requires good timing and modification of multiple request parameters. Please deploy the provided updates and patch releases. The cache for PDF exports now takes user session information into consideration when performing authorization decisions. No publicly available exploits are known.
CVSS信息
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
漏洞类别
信息暴露
漏洞标题
Open-Xchange App Suite 安全漏洞
漏洞描述信息
Open-Xchange App Suite是德国Open-Xchange公司的一个电子邮件及生产力套件客户端软件。 Open-Xchange App Suite 8.21及之前版本存在安全漏洞，该漏洞源于向未经授权的行为者泄露敏感信息。
CVSS信息
N/A
漏洞类别
其他