CVE-2006-2738: Open-Xchange

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

The open source version of Open-Xchange 0.8.2 and earlier uses a static default username and password with a valid login shell in the initfile for the ldap-server, which allows remote attackers to access any server where the default has not been changed.

Affected products

• Open-Xchange Open-Xchange: up to and including 0.8.2; version 0.8.1.6 only

Published 2006-06-01. Last modified 2026-06-16.