Lucene search

K
cve[email protected]CVE-2014-2051
HistoryJun 05, 2014 - 3:44 p.m.

CVE-2014-2051

2014-06-0515:44:07
CWE-94
web.nvd.nist.gov
20
cve-2014-2051
owncloud
ldap injection
security vulnerability
nvd
remote attack

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.9%

ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to conduct an LDAP injection attack via unspecified vectors, as demonstrated using a “login query.”

Affected configurations

NVD
Node
owncloudowncloudMatch6.0.0
OR
owncloudowncloudMatch6.0.1
Node
owncloudowncloudRange5.0.14a
OR
owncloudowncloudMatch5.0.0
OR
owncloudowncloudMatch5.0.1
OR
owncloudowncloudMatch5.0.2
OR
owncloudowncloudMatch5.0.3
OR
owncloudowncloudMatch5.0.4
OR
owncloudowncloudMatch5.0.5
OR
owncloudowncloudMatch5.0.6
OR
owncloudowncloudMatch5.0.7
OR
owncloudowncloudMatch5.0.8
OR
owncloudowncloudMatch5.0.9
OR
owncloudowncloudMatch5.0.10
OR
owncloudowncloudMatch5.0.11
OR
owncloudowncloudMatch5.0.12
OR
owncloudowncloudMatch5.0.13
OR
owncloudowncloudMatch5.0.14

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.9%

Related for CVE-2014-2051