CVE-2024-23193

{"id": "CVE-2024-23193", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security@open-xchange.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.6}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.6}]}, "published": "2024-05-06T07:15:07.533", "references": [{"url": "http://seclists.org/fulldisclosure/2024/May/3", "tags": ["Mailing List", "Third Party Advisory"], "source": "security@open-xchange.com"}, {"url": "https://documentation.open-xchange.com/appsuite/releases/8.22/", "tags": ["Release Notes"], "source": "security@open-xchange.com"}, {"url": "https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2024/oxas-adv-2024-0002.json", "tags": ["Issue Tracking", "Vendor Advisory"], "source": "security@open-xchange.com"}, {"url": "http://seclists.org/fulldisclosure/2024/May/3", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://documentation.open-xchange.com/appsuite/releases/8.22/", "tags": ["Release Notes"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2024/oxas-adv-2024-0002.json", "tags": ["Issue Tracking", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@open-xchange.com", "description": [{"lang": "en", "value": "CWE-200"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-384"}]}], "descriptions": [{"lang": "en", "value": "E-Mails exported as PDF were stored in a cache that did not consider specific session information for the related user account. Users of the same service node could access other users E-Mails in case they were exported as PDF for a brief moment until caches were cleared. Successful exploitation requires good timing and modification of multiple request parameters. Please deploy the provided updates and patch releases. The cache for PDF exports now takes user session information into consideration when performing authorization decisions. No publicly available exploits are known."}, {"lang": "es", "value": "Los correos electr\u00f3nicos exportados como PDF se almacenaban en una memoria cach\u00e9 que no consideraba informaci\u00f3n de sesi\u00f3n espec\u00edfica para la cuenta de usuario relacionada. Los usuarios del mismo nodo de servicio pod\u00edan acceder a los correos electr\u00f3nicos de otros usuarios en caso de que se exportaran como PDF por un breve momento hasta que se borraran los cach\u00e9s. La explotaci\u00f3n exitosa requiere una buena sincronizaci\u00f3n y modificaci\u00f3n de m\u00faltiples par\u00e1metros de solicitud. Implemente las actualizaciones y lanzamientos de parches proporcionados. La cach\u00e9 para exportaciones de PDF ahora tiene en cuenta la informaci\u00f3n de la sesi\u00f3n del usuario al tomar decisiones de autorizaci\u00f3n. No se conocen exploits disponibles p\u00fablicamente."}], "lastModified": "2025-04-10T18:43:56.177", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:open-xchange:ox_app_suite:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7554B880-74F3-4579-877E-E0E0DB12765B", "versionEndExcluding": "8.22"}], "operator": "OR"}]}], "sourceIdentifier": "security@open-xchange.com"}