Vulnerabilities > CVE-2013-1649 - Credentials Management vulnerability in Open-Xchange Server 6.20.7/6.22.0/6.22.1
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 uses the crypt and SHA-1 algorithms for password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |
Common Weakness Enumeration (CWE)
Exploit-Db
| description | Open-Xchange Server 6 - Multiple Vulnerabilities. CVE-2013-1645,CVE-2013-1646,CVE-2013-1647,CVE-2013-1648,CVE-2013-1649,CVE-2013-1650,CVE-2013-1651. Webapps ... |
| id | EDB-ID:24791 |
| last seen | 2016-02-03 |
| modified | 2013-03-15 |
| published | 2013-03-15 |
| reporter | Martin Braun |
| source | https://www.exploit-db.com/download/24791/ |
| title | Open-Xchange Server 6 - Multiple Vulnerabilities |
Packetstorm
| data source | https://packetstormsecurity.com/files/download/120785/openxchange-xsstraversal.txt |
| id | PACKETSTORM:120785 |
| last seen | 2016-12-05 |
| published | 2013-03-14 |
| reporter | Martin Braun |
| source | https://packetstormsecurity.com/files/120785/Open-Xchange-6-XSS-LFI-SSRF-Hashing.html |
| title | Open-Xchange 6 XSS / LFI / SSRF / Hashing |
Seebug
| bulletinFamily | exploit |
| description | No description provided by source. |
| id | SSV:78479 |
| last seen | 2017-11-19 |
| modified | 2014-07-01 |
| published | 2014-07-01 |
| reporter | Root |
| source | https://www.seebug.org/vuldb/ssvid-78479 |
| title | Open-Xchange Server 6 - Multiple Vulnerabilities |