Lucene search

K
cve[email protected]CVE-2014-2585
HistoryOct 03, 2022 - 4:20 p.m.

CVE-2014-2585

2022-10-0316:20:48
CWE-20
web.nvd.nist.gov
19
cve-2014-2585
owncloud
filesystem
remote
authentication
vulnerability

4.9 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.1%

ownCloud before 5.0.15 and 6.x before 6.0.2, when the file_external app is enabled, allows remote authenticated users to mount the local filesystem in the userโ€™s ownCloud via the mount configuration.

Affected configurations

NVD
Node
owncloudowncloudRangeโ‰ค5.0.14a
OR
owncloudowncloudMatch5.0.0
OR
owncloudowncloudMatch5.0.1
OR
owncloudowncloudMatch5.0.2
OR
owncloudowncloudMatch5.0.3
OR
owncloudowncloudMatch5.0.4
OR
owncloudowncloudMatch5.0.5
OR
owncloudowncloudMatch5.0.6
OR
owncloudowncloudMatch5.0.7
OR
owncloudowncloudMatch5.0.8
OR
owncloudowncloudMatch5.0.9
OR
owncloudowncloudMatch5.0.10
OR
owncloudowncloudMatch5.0.11
OR
owncloudowncloudMatch5.0.12
OR
owncloudowncloudMatch5.0.13
OR
owncloudowncloudMatch5.0.14
OR
owncloudowncloudMatch6.0.0
OR
owncloudowncloudMatch6.0.1

4.9 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.1%