CVE-2017-17062
N/A
Published: June 15, 2018 at 09:00 PM UTC
Updated: June 17, 2026 at 01:10 AM UTC
1 product affected across 1 vendorOpen Xchange Appsuite
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 4%
Description
The backend component in Open-Xchange OX App Suite before 7.6.3-rev35, 7.8.x before 7.8.2-rev38, 7.8.3 before 7.8.3-rev41, and 7.8.4 before 7.8.4-rev19 allows remote authenticated users to save arbitrary user attributes by leveraging improper privilege management.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 7.6.37.6.3 rev147.6.3 rev157.6.3 rev167.6.3 rev177.6.3 rev187.6.3 rev207.6.3 rev227.6.3 rev237.6.3 rev247.6.3 rev257.6.3 rev267.6.3 rev287.6.3 rev297.6.3 rev307.6.3 rev317.6.3 rev327.6.3 rev337.8.07.8.27.8.37.8.3 rev107.8.3 rev117.8.3 rev127.8.3 rev137.8.3 rev147.8.3 rev157.8.3 rev167.8.3 rev177.8.3 rev187.8.3 rev197.8.3 rev207.8.3 rev217.8.3 rev227.8.3 rev237.8.3 rev247.8.3 rev257.8.3 rev267.8.3 rev277.8.3 rev287.8.3 rev297.8.3 rev307.8.3 rev317.8.3 rev327.8.3 rev337.8.3 rev347.8.3 rev357.8.3 rev367.8.3 rev387.8.3 rev397.8.3 rev407.8.3 rev57.8.3 rev67.8.3 rev87.8.3 rev97.8.47.8.4 rev107.8.4 rev117.8.4 rev137.8.4 rev147.8.4 rev157.8.4 rev167.8.4 rev177.8.4 rev187.8.4 rev37.8.4 rev47.8.4 rev57.8.4 rev67.8.4 rev77.8.4 rev87.8.4 rev9
Remediation
No guide yetNo remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.
References (3)
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
Source: [email protected]
http://packetstormsecurity.com/files/148118/OX-App-Suite-7.8.4-XSS-Privilege-Management-SSRF-Traversal.htmlMailing Listx_refsource_FULLDISCExploitThird Party Advisory
Source: [email protected]
http://seclists.org/fulldisclosure/2018/Jun/23Exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry
Source: [email protected]
https://www.exploit-db.com/exploits/44881/Quick Info
StatusMODIFIED
CWE
CWE-79
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card