Lucene search

K
owncloudOwnCloudOC-SA-2012-015
HistoryJul 10, 2012 - 11:42 a.m.

Server: Auth bypass in index.php

2012-07-1011:42:22
owncloud.org
24

0.005 Low

EPSS

Percentile

76.7%

index.php before ownCloud 4.0.7 does not properly validate the oc_token cookie, which allows remote attackers to bypass authentication via a crafted oc_token cookie value.


For more information please consult the official advisory.

This advisory is licensed CC BY-SA 4.0

CPENameOperatorVersion
owncloud serverlt4.0.7

0.005 Low

EPSS

Percentile

76.7%