Lucene search

K
owncloudOwnCloudOC-SA-2013-015
HistoryApr 11, 2013 - 11:42 a.m.

Server: Insecure database password generator

2013-04-1111:42:22
owncloud.org
39

EPSS

0.002

Percentile

51.9%

Due to using “time()” as random source in the ownCloud installation routine, the entropy of the generated PostgreSQL database user password is very low and can be easily guessed.

This issue is inside the ownCloud setup routine and is not related to any PostgreSQL vulnerability.


For more information please consult the official advisory.

This advisory is licensed CC BY-SA 4.0

EPSS

0.002

Percentile

51.9%