Lucene search
OwnCloudOC-SA-2012-011HistoryAug 10, 2012 - 11:42 a.m.
Server: Auth bypass in /lib/base.php
2012-08-1011:42:22
owncloud.org
29
0.001 Low
EPSS
Percentile
36.7%
/lib/base.php before ownCloud 4.0.8 does not properly validate the user_id session variable via WebDAV, which allows authenticated attackers to gain access to other users files.
For more information please consult the official advisory.
This advisory is licensed CC BY-SA 4.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| owncloud server | lt | 4.0.8 |
Related
ubuntucve
ubuntucve
CVE-2012-5336
2014-06-04 00:00:00
prion
prion
Open redirect
2014-06-04 14:55:00
nvd
nvd
CVE-2012-5336
2014-06-04 14:55:03
owncloud
owncloud
Auth bypass in /lib/base.php - ownCloud
2012-08-10 17:09:56
cvelist
cvelist
CVE-2012-5336
2014-06-04 14:00:00
cve
cve
CVE-2012-5336
2014-06-04 14:55:03
openvas
openvas
ownCloud Multiple Vulnerabilities-01 (Jul 2014)
2014-07-03 00:00:00