CVE-2013-1650: Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 uses weak permissions...

Security readout for executives and security teams

Open-Xchange Server installations on affected revisions could expose configuration files because the configuration directory was readable by local users. Business impact depends on what secrets were present, but this is an information disclosure issue requiring local system access. Exposure is limited to Open-Xchange Server systems running the affected revisions with local user access. Internet-only attackers are not described in the sources. Risk is higher on shared hosts or systems with untrusted local accounts. Treat as a moderate-priority infrastructure hygiene issue. It is not described as remotely exploitable, but exposed configuration secrets can support broader compromise if local access exists. Mitigation focus: Upgrade to the fixed Open-Xchange revisions or later vendor-supported releases.; Review the Open-Xchange advisory for exact package guidance.; Restrict configuration directory permissions so unrelated local users cannot read sensitive files..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.