Lucene search
K

The vulnerability in the web application for data synchronization with ownCloud allows a hacker to read data from arbitrary calendars.

🗓️ 20 Nov 2015 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec
🔗 bdu.fstec.ru👁 1 Views

Remote attacker bypasses authentication with a user key to read arbitrary calendars in ownCloud sync.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
CNVD
ownCloud Unauthorized Access Vulnerability
27 Sep 201500:00
cnvd
CVE
CVE-2015-6670
26 Oct 201514:00
cve
Cvelist
CVE-2015-6670
26 Oct 201514:00
cvelist
Debian
[SECURITY] [DSA 3373-1] owncloud security update
18 Oct 201513:49
debian
Debian
[SECURITY] [DSA 3373-1] owncloud security update
18 Oct 201513:49
debian
Tenable Nessus
Debian DSA-3373-1 : owncloud - security update
19 Oct 201500:00
nessus
EUVD
EUVD-2015-6608
7 Oct 202500:30
euvd
Mageia
Updated owncloud packages fix security vulnerabilities
18 Sep 201515:57
mageia
NVD
CVE-2015-6670
26 Oct 201514:59
nvd
OwnCloud
Server: Calendar export: Authorization Bypass Through User-Controlled Key
24 Aug 201522:09
owncloud
Rows per page
Vulners
Node
owncloudowncloudRange7.0.07.0.9
OR
owncloudowncloudRange8.0.08.0.7
OR
owncloudowncloudRange8.1.08.1.2

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation