CVE-2016-6190

SOGo before 2.3.12 and 3.x before 3.1.1 does not restrict access to the UID and DTSTAMP attributes, which allows remote authenticated users to obtain sensitive information about appointments with the "View the Date & Time" restriction, as demonstrated by correlating UIDs and DTSTAMPs between all users.

CVSS v3 4.3 MEDIUM
CVSS v2.0 4.0 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector : AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.openwall.com/lists/oss-security/2016/07/09/3	Mailing List VDB Entry
https://github.com/inverse-inc/sogo/commit/717f45f640a2866b76a8984139391fae64339225	Patch
https://github.com/inverse-inc/sogo/commit/875a4aca3218340fd4d3141950c82c2ff45b343d	Patch
https://sogo.nu/bugs/view.php?id=3696	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:inverse-inc:sogo::::::::
	cpe:2.3:a:inverse-inc:sogo:3.0.0:::::::*
	cpe:2.3:a:inverse-inc:sogo:3.0.0:beta_1::::::
	cpe:2.3:a:inverse-inc:sogo:3.0.0:beta_2::::::
	cpe:2.3:a:inverse-inc:sogo:3.0.0:beta_3::::::
	cpe:2.3:a:inverse-inc:sogo:3.0.0:beta_4::::::
	cpe:2.3:a:inverse-inc:sogo:3.0.0:beta_5::::::
	cpe:2.3:a:inverse-inc:sogo:3.0.1:::::::*
	cpe:2.3:a:inverse-inc:sogo:3.0.2:::::::*
	cpe:2.3:a:inverse-inc:sogo:3.1.0:::::::*

History

No history.

Information

Published : 2017-02-17 17:59

Updated : 2024-02-04 19:11

NVD link : CVE-2016-6190

Mitre link : CVE-2016-6190

CVE.ORG link : CVE-2016-6190

JSON object : View

Products Affected

inverse-inc

sogo

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2016-6190", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": true, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2017-02-17T17:59:00.843", "references": [{"url": "http://www.openwall.com/lists/oss-security/2016/07/09/3", "tags": ["Mailing List", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://github.com/inverse-inc/sogo/commit/717f45f640a2866b76a8984139391fae64339225", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "https://github.com/inverse-inc/sogo/commit/875a4aca3218340fd4d3141950c82c2ff45b343d", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "https://sogo.nu/bugs/view.php?id=3696", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "SOGo before 2.3.12 and 3.x before 3.1.1 does not restrict access to the UID and DTSTAMP attributes, which allows remote authenticated users to obtain sensitive information about appointments with the \"View the Date & Time\" restriction, as demonstrated by correlating UIDs and DTSTAMPs between all users."}, {"lang": "es", "value": "SOGo en versiones anteriores a 2.3.12 y 3.x en versiones anteriores a 3.1.1 no restringe el acceso a los atributos UID y DTSTAMP, lo que permite a los usuarios autenticados remotos obtener informaci\u00f3n confidencial sobre citas con la restricci\u00f3n \"Ver la fecha y hora\", como se demuestra mediante la correlaci\u00f3n UIDs y DTSTAMP entre todos los usuarios."}], "lastModified": "2017-02-22T18:00:48.267", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:inverse-inc:sogo:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "91F46E93-705A-41F5-BFA3-4FA2ECA662E6", "versionEndIncluding": "2.3.11"}, {"criteria": "cpe:2.3:a:inverse-inc:sogo:3.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D20DC1B-9B7D-40FA-A8BA-E2EE75CD490B"}, {"criteria": "cpe:2.3:a:inverse-inc:sogo:3.0.0:beta_1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "593ACB47-FA85-40FC-AD6E-20624190C5AB"}, {"criteria": "cpe:2.3:a:inverse-inc:sogo:3.0.0:beta_2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F3CBC066-6D19-4172-8198-F813D06F1CD9"}, {"criteria": "cpe:2.3:a:inverse-inc:sogo:3.0.0:beta_3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B171622-F0CE-4660-8FE8-DEDF69853AFB"}, {"criteria": "cpe:2.3:a:inverse-inc:sogo:3.0.0:beta_4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45411BA4-31FF-4514-A06E-5D8AA467C55C"}, {"criteria": "cpe:2.3:a:inverse-inc:sogo:3.0.0:beta_5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "632B5461-9689-49D9-9FA0-548197162FE3"}, {"criteria": "cpe:2.3:a:inverse-inc:sogo:3.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6A83B27-97CD-4760-903D-15252C351359"}, {"criteria": "cpe:2.3:a:inverse-inc:sogo:3.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BEDC58CE-65A3-4800-A70E-B96C597528DA"}, {"criteria": "cpe:2.3:a:inverse-inc:sogo:3.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "727D82DD-4057-4BC9-A986-7BE847E2BF02"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}