cve.bz

CVE-2023-26427

3.3 lowEPSS 0.3%

Low (3.3) in open-xchange open-xchange appsuite backend. EPSS 0.3% chance of exploitation in the next 30 days.

Default permissions for a properties file were too permissive. Local system users could read potentially sensitive information. We updated the default permissions for noreply.properties set during package installation. No publicly available exploits are known.

Severity

CVSS 3.1

3.3 low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWEs
CWE-732, CWE-922
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON