CVE-2018-5751

Name of the Vulnerable Software and Affected Versions: Open-Xchange OX App Suite versions prior to 7.6.3-rev36 Open-Xchange OX App Suite versions 7.8.x prior to 7.8.2-rev39 Open-Xchange OX App Suite versions 7.8.3 prior to 7.8.3-rev44 Open-Xchange OX App Suite versions 7.8.4 prior to 7.8.4-rev22

Description: The issue allows remote authenticated users to obtain sensitive information about external guest users via vectors related to the "groups" and "users" APIs.

Recommendations: For Open-Xchange OX App Suite versions prior to 7.6.3-rev36, update to version 7.6.3-rev36 or later. For Open-Xchange OX App Suite versions 7.8.x prior to 7.8.2-rev39, update to version 7.8.2-rev39 or later. For Open-Xchange OX App Suite versions 7.8.3 prior to 7.8.3-rev44, update to version 7.8.3-rev44 or later. For Open-Xchange OX App Suite versions 7.8.4 prior to 7.8.4-rev22, update to version 7.8.4-rev22 or later.