CVE-2018-9998

  • Last update: Apr 13, 2023

Description

Open-Xchange OX App Suite before 7.6.3-rev37, 7.8.x before 7.8.2-rev40, 7.8.3 before 7.8.3-rev48, and 7.8.4 before 7.8.4-rev28 include folder names in API error responses, which allows remote attackers to obtain sensitive information via the folder parameter in an "all" action to api/tasks.

Software From Fixed in
open-xchange / open-xchange_appsuite - 7.6.3.x
open-xchange / open-xchange_appsuite 7.6.3-rev14 7.6.3-rev14.x
open-xchange / open-xchange_appsuite 7.6.3-rev15 7.6.3-rev15.x
open-xchange / open-xchange_appsuite 7.6.3-rev16 7.6.3-rev16.x
open-xchange / open-xchange_appsuite 7.6.3-rev17 7.6.3-rev17.x
open-xchange / open-xchange_appsuite 7.6.3-rev18 7.6.3-rev18.x
open-xchange / open-xchange_appsuite 7.6.3-rev20 7.6.3-rev20.x
open-xchange / open-xchange_appsuite 7.6.3-rev22 7.6.3-rev22.x
open-xchange / open-xchange_appsuite 7.6.3-rev23 7.6.3-rev23.x
open-xchange / open-xchange_appsuite 7.6.3-rev24 7.6.3-rev24.x
open-xchange / open-xchange_appsuite 7.6.3-rev25 7.6.3-rev25.x
open-xchange / open-xchange_appsuite 7.6.3-rev26 7.6.3-rev26.x
open-xchange / open-xchange_appsuite 7.6.3-rev28 7.6.3-rev28.x
open-xchange / open-xchange_appsuite 7.6.3-rev29 7.6.3-rev29.x
open-xchange / open-xchange_appsuite 7.6.3-rev30 7.6.3-rev30.x
open-xchange / open-xchange_appsuite 7.6.3-rev31 7.6.3-rev31.x
open-xchange / open-xchange_appsuite 7.6.3-rev32 7.6.3-rev32.x
open-xchange / open-xchange_appsuite 7.6.3-rev33 7.6.3-rev33.x
open-xchange / open-xchange_appsuite 7.6.3-rev35 7.6.3-rev35.x
open-xchange / open-xchange_appsuite 7.6.3-rev36 7.6.3-rev36.x
open-xchange / open-xchange_appsuite 7.8.0 7.8.0.x
open-xchange / open-xchange_appsuite 7.8.2 7.8.2.x
open-xchange / open-xchange_appsuite 7.8.3 7.8.3.x
open-xchange / open-xchange_appsuite 7.8.3-rev10 7.8.3-rev10.x
open-xchange / open-xchange_appsuite 7.8.3-rev11 7.8.3-rev11.x
open-xchange / open-xchange_appsuite 7.8.3-rev12 7.8.3-rev12.x
open-xchange / open-xchange_appsuite 7.8.3-rev13 7.8.3-rev13.x
open-xchange / open-xchange_appsuite 7.8.3-rev14 7.8.3-rev14.x
open-xchange / open-xchange_appsuite 7.8.3-rev15 7.8.3-rev15.x
open-xchange / open-xchange_appsuite 7.8.3-rev16 7.8.3-rev16.x
open-xchange / open-xchange_appsuite 7.8.3-rev17 7.8.3-rev17.x
open-xchange / open-xchange_appsuite 7.8.3-rev18 7.8.3-rev18.x
open-xchange / open-xchange_appsuite 7.8.3-rev19 7.8.3-rev19.x
open-xchange / open-xchange_appsuite 7.8.3-rev20 7.8.3-rev20.x
open-xchange / open-xchange_appsuite 7.8.3-rev21 7.8.3-rev21.x
open-xchange / open-xchange_appsuite 7.8.3-rev22 7.8.3-rev22.x
open-xchange / open-xchange_appsuite 7.8.3-rev23 7.8.3-rev23.x
open-xchange / open-xchange_appsuite 7.8.3-rev24 7.8.3-rev24.x
open-xchange / open-xchange_appsuite 7.8.3-rev25 7.8.3-rev25.x
open-xchange / open-xchange_appsuite 7.8.3-rev26 7.8.3-rev26.x
open-xchange / open-xchange_appsuite 7.8.3-rev27 7.8.3-rev27.x
open-xchange / open-xchange_appsuite 7.8.3-rev28 7.8.3-rev28.x
open-xchange / open-xchange_appsuite 7.8.3-rev29 7.8.3-rev29.x
open-xchange / open-xchange_appsuite 7.8.3-rev30 7.8.3-rev30.x
open-xchange / open-xchange_appsuite 7.8.3-rev31 7.8.3-rev31.x
open-xchange / open-xchange_appsuite 7.8.3-rev32 7.8.3-rev32.x
open-xchange / open-xchange_appsuite 7.8.3-rev33 7.8.3-rev33.x
open-xchange / open-xchange_appsuite 7.8.3-rev34 7.8.3-rev34.x
open-xchange / open-xchange_appsuite 7.8.3-rev35 7.8.3-rev35.x
open-xchange / open-xchange_appsuite 7.8.3-rev36 7.8.3-rev36.x
open-xchange / open-xchange_appsuite 7.8.3-rev38 7.8.3-rev38.x
open-xchange / open-xchange_appsuite 7.8.3-rev39 7.8.3-rev39.x
open-xchange / open-xchange_appsuite 7.8.3-rev40 7.8.3-rev40.x
open-xchange / open-xchange_appsuite 7.8.3-rev41 7.8.3-rev41.x
open-xchange / open-xchange_appsuite 7.8.3-rev42 7.8.3-rev42.x
open-xchange / open-xchange_appsuite 7.8.3-rev43 7.8.3-rev43.x
open-xchange / open-xchange_appsuite 7.8.3-rev44 7.8.3-rev44.x
open-xchange / open-xchange_appsuite 7.8.3-rev45 7.8.3-rev45.x
open-xchange / open-xchange_appsuite 7.8.3-rev46 7.8.3-rev46.x
open-xchange / open-xchange_appsuite 7.8.3-rev47 7.8.3-rev47.x
open-xchange / open-xchange_appsuite 7.8.3-rev5 7.8.3-rev5.x
open-xchange / open-xchange_appsuite 7.8.3-rev6 7.8.3-rev6.x
open-xchange / open-xchange_appsuite 7.8.3-rev8 7.8.3-rev8.x
open-xchange / open-xchange_appsuite 7.8.3-rev9 7.8.3-rev9.x
open-xchange / open-xchange_appsuite 7.8.4 7.8.4.x
open-xchange / open-xchange_appsuite 7.8.4-rev10 7.8.4-rev10.x
open-xchange / open-xchange_appsuite 7.8.4-rev11 7.8.4-rev11.x
open-xchange / open-xchange_appsuite 7.8.4-rev13 7.8.4-rev13.x
open-xchange / open-xchange_appsuite 7.8.4-rev14 7.8.4-rev14.x
open-xchange / open-xchange_appsuite 7.8.4-rev15 7.8.4-rev15.x
open-xchange / open-xchange_appsuite 7.8.4-rev16 7.8.4-rev16.x
open-xchange / open-xchange_appsuite 7.8.4-rev17 7.8.4-rev17.x
open-xchange / open-xchange_appsuite 7.8.4-rev18 7.8.4-rev18.x
open-xchange / open-xchange_appsuite 7.8.4-rev19 7.8.4-rev19.x
open-xchange / open-xchange_appsuite 7.8.4-rev20 7.8.4-rev20.x
open-xchange / open-xchange_appsuite 7.8.4-rev21 7.8.4-rev21.x
open-xchange / open-xchange_appsuite 7.8.4-rev22 7.8.4-rev22.x
open-xchange / open-xchange_appsuite 7.8.4-rev23 7.8.4-rev23.x
open-xchange / open-xchange_appsuite 7.8.4-rev24 7.8.4-rev24.x
open-xchange / open-xchange_appsuite 7.8.4-rev25 7.8.4-rev25.x
open-xchange / open-xchange_appsuite 7.8.4-rev26 7.8.4-rev26.x
open-xchange / open-xchange_appsuite 7.8.4-rev27 7.8.4-rev27.x
open-xchange / open-xchange_appsuite 7.8.4-rev3 7.8.4-rev3.x
open-xchange / open-xchange_appsuite 7.8.4-rev4 7.8.4-rev4.x
open-xchange / open-xchange_appsuite 7.8.4-rev5 7.8.4-rev5.x
open-xchange / open-xchange_appsuite 7.8.4-rev6 7.8.4-rev6.x
open-xchange / open-xchange_appsuite 7.8.4-rev7 7.8.4-rev7.x
open-xchange / open-xchange_appsuite 7.8.4-rev8 7.8.4-rev8.x
open-xchange / open-xchange_appsuite 7.8.4-rev9 7.8.4-rev9.x

Details

    • Severity: Medium
  • CVE: CVE-2018-9998
  • Published: Jul 5, 2018
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v3

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v2

  • Severity: Low
  • Score: 4
  • AV:N/AC:L/Au:S/C:P/I:N/A:N

CWEs