Lucene search

K
osvGoogleOSV:CVE-2017-5865
HistoryMar 03, 2017 - 3:59 p.m.

CVE-2017-5865

2017-03-0315:59:01
Google
osv.dev
3

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.6%

The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 sends different error messages depending on whether the username is valid, which allows remote attackers to enumerate user names via a large number of password reset attempts.

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.6%