Vulnerability in Open-Xchange Server
CVE-2013-1649
Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 uses the crypt and SHA-1 algorithms for password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.
EPSS: 0.019 (77.4th percentile) — read the EPSS interpretation.
Affected products
- Open-xchange Open-xchange_server — versions 6.20.7, 6.22.0, 6.22.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)