CVE-2017-17062

Name of the Vulnerable Software and Affected Versions: Open-Xchange OX App Suite versions prior to 7.6.3-rev35 Open-Xchange OX App Suite versions 7.8.x prior to 7.8.2-rev38 Open-Xchange OX App Suite versions 7.8.3 prior to 7.8.3-rev41 Open-Xchange OX App Suite versions 7.8.4 prior to 7.8.4-rev19

Description: The issue allows remote authenticated users to save arbitrary user attributes due to improper privilege management in the backend component.

Recommendations: For Open-Xchange OX App Suite versions prior to 7.6.3-rev35, update to version 7.6.3-rev35 or later. For Open-Xchange OX App Suite versions 7.8.x prior to 7.8.2-rev38, update to version 7.8.2-rev38 or later. For Open-Xchange OX App Suite versions 7.8.3 prior to 7.8.3-rev41, update to version 7.8.3-rev41 or later. For Open-Xchange OX App Suite versions 7.8.4 prior to 7.8.4-rev19, update to version 7.8.4-rev19 or later.