Lucene search

K
cvelistMitreCVELIST:CVE-2017-5865
HistoryMar 03, 2017 - 3:00 p.m.

CVE-2017-5865

2017-03-0315:00:00
mitre
www.cve.org
3

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

46.4%

The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 sends different error messages depending on whether the username is valid, which allows remote attackers to enumerate user names via a large number of password reset attempts.

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

46.4%

Related for CVELIST:CVE-2017-5865