Lucene search
HistoryAug 20, 2014 - 2:55 p.m.
CVE-2014-4929
cve-2014-4929
directory traversal
vulnerability
owncloud server
remote attackers
arbitrary files
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
81.1%
Directory traversal vulnerability in the routing component in ownCloud Server before 5.0.17 and 6.0.x before 6.0.4 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in a filename, related to index.php.
Affected configurations
Node
owncloudowncloudMatch6.0.0
ORowncloudowncloudMatch6.0.1
ORowncloudowncloudMatch6.0.2
ORowncloudowncloudMatch6.0.3
Node
owncloudowncloudRange≤5.0.16
ORowncloudowncloudMatch5.0.0
ORowncloudowncloudMatch5.0.1
ORowncloudowncloudMatch5.0.2
ORowncloudowncloudMatch5.0.3
ORowncloudowncloudMatch5.0.4
ORowncloudowncloudMatch5.0.5
ORowncloudowncloudMatch5.0.6
ORowncloudowncloudMatch5.0.7
ORowncloudowncloudMatch5.0.8
ORowncloudowncloudMatch5.0.9
ORowncloudowncloudMatch5.0.10
ORowncloudowncloudMatch5.0.11
ORowncloudowncloudMatch5.0.12
ORowncloudowncloudMatch5.0.13
ORowncloudowncloudMatch5.0.14
ORowncloudowncloudMatch5.0.14a
ORowncloudowncloudMatch5.0.15
| CPE | Name | Operator | Version |
|---|---|---|---|
| owncloud:owncloud | owncloud | eq | 6.0.0 |
| owncloud:owncloud | owncloud | eq | 6.0.1 |
| owncloud:owncloud | owncloud | eq | 6.0.2 |
| owncloud:owncloud | owncloud | eq | 6.0.3 |
Related
nvd
nvd
CVE-2014-4929
2014-08-20 14:55:06
nessus
nessus
Mandriva Linux Security Advisory : owncloud (MDVSA-2014:140)
2014-07-30 00:00:00
openvas
openvas
ownCloud Local File Inclusion Vulnerability -01 (Aug 2014)
2014-08-25 00:00:00
owncloud
owncloud
Local file inclusion in core - ownCloud
2014-07-15 18:30:18
Server: Local file inclusion in core
2014-07-15 20:10:05
ubuntucve
ubuntucve
CVE-2014-4929
2014-08-20 00:00:00
prion
prion
Directory traversal
2014-08-20 14:55:00
cvelist
cvelist
CVE-2014-4929
2014-08-20 14:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
81.1%
Related for CVE-2014-4929