Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 has a hardcoded password for node join operations, which allows remote attackers to expand a cluster by finding this password in the source code and then sending the password in a Hazelcast cluster API call, a different vulnerability than CVE-2013-5200.
References
Link | Resource |
---|---|
http://archives.neohapsis.com/archives/bugtraq/2013-09/0032.html | Exploit |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2022-10-03T16:14:55
Updated: 2022-10-03T16:14:55
Reserved: 2022-10-03T00:00:00
Link: CVE-2013-5934
JSON object: View
NVD Information
Status : Analyzed
Published: 2013-09-25T10:31:29.393
Modified: 2013-09-25T22:49:10.923
Link: CVE-2013-5934
JSON object: View
Redhat Information
No data.
CWE