Test ID:	1.3.6.1.4.1.25623.1.0.806073
Category:	Web application abuses
Title:	Open-Xchange (OX) App Suite Multiple Security Bypass Vulnerabilities (Oct 2015)
Summary:	Open-Xchange (OX) App Suite is prone to multiple security bypass vulnerabilities.
Description:	Summary: Open-Xchange (OX) App Suite is prone to multiple security bypass vulnerabilities. Vulnerability Insight: Multiple flaws exist due to password recovery service and E-Mail autoconfiguration feature does not handle password properly. Vulnerability Impact: Successful exploitation will allow attackers to obtain potentially useful password-pattern information. Affected Software/OS: Open-Xchange (OX) App Suite versions before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13 Solution: Upgrade to Open-Xchange (OX) AppSuite version 7.2.2-rev20, 7.4.1-rev11, 7.4.2-rev13 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-2391 Bugtraq: 20140408 Open-Xchange Security Advisory 2014-04-08 (Google Search) http://www.securityfocus.com/archive/1/531762 Common Vulnerability Exposure (CVE) ID: CVE-2014-2392
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.