| Package | Affected versions | Patched versions |
|---|---|---|
| open-xchange appsuite | = 7.0.1= 7.0.2= 7.2.0= 7.2.1 |
The (1) REST and (2) memcache interfaces in the Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 do not require authentication, which allows remote attackers to obtain sensitive information or modify data via an API call.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free