Lucene search

K
nvd[email protected]NVD:CVE-2014-2585
HistoryMar 24, 2014 - 4:35 p.m.

CVE-2014-2585

2014-03-2416:35:49
CWE-20
web.nvd.nist.gov
4

4.9 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.1%

ownCloud before 5.0.15 and 6.x before 6.0.2, when the file_external app is enabled, allows remote authenticated users to mount the local filesystem in the user’s ownCloud via the mount configuration.

Affected configurations

NVD
Node
owncloudowncloudRange5.0.14a
OR
owncloudowncloudMatch5.0.0
OR
owncloudowncloudMatch5.0.1
OR
owncloudowncloudMatch5.0.2
OR
owncloudowncloudMatch5.0.3
OR
owncloudowncloudMatch5.0.4
OR
owncloudowncloudMatch5.0.5
OR
owncloudowncloudMatch5.0.6
OR
owncloudowncloudMatch5.0.7
OR
owncloudowncloudMatch5.0.8
OR
owncloudowncloudMatch5.0.9
OR
owncloudowncloudMatch5.0.10
OR
owncloudowncloudMatch5.0.11
OR
owncloudowncloudMatch5.0.12
OR
owncloudowncloudMatch5.0.13
OR
owncloudowncloudMatch5.0.14
OR
owncloudowncloudMatch6.0.0
OR
owncloudowncloudMatch6.0.1

4.9 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.1%