CVE-2013-4790 - CVE House
Back to Database
Status published Low CVE-2013-4790

Open-Xchange AppSuite before 7.0.2 rev14, 7.2.0 before rev11, 7.2.1 before...

Vulnerability Description

Open-Xchange AppSuite before 7.0.2 rev14, 7.2.0 before rev11, 7.2.1 before rev10, and 7.2.2 before rev9 relies on user-supplied data to predict the IMAP server hostname for an external domain name, which allows remote authenticated users to discover e-mail credentials of other users in opportunistic circumstances via a manual-mode association of a personal e-mail address with the hostname of a crafted IMAP server.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-4790

Credits & Attribution

No credits recorded in the NVD database.

References

More from open-xchange

View All →
CVE-2022-43699
OX App Suite before 7.10.6-rev30 allows SSRF because e-mail account...
Unknown 0
CVE-2022-43698
OX App Suite before 7.10.6-rev30 allows SSRF because changing a...
Unknown 0
CVE-2022-43697
OX App Suite before 7.10.6-rev30 allows XSS via an activity...
Unknown 0
CVE-2022-43696
OX App Suite before 7.10.6-rev20 allows XSS via upsell ads....
Unknown 0
CVE-2022-37313
OX App Suite through 7.10.6 allows SSRF because the anti-SSRF...
Unknown 0

Affected Vendor

open-xchange

View all reports →

Affected Software

open-xchange appsuite
Vulnerable Versions:
7.0.2, 7.2.0, 7.2.1, 7.2.2

Timeline

Official Publish: September 5th, 2013
Last Modified: September 16th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.