Lucene search

K
owncloudOwnCloudOWNCLOUD:00B0C28EE1D1ABD2905B99EC7FAEDF87
HistoryAug 31, 2015 - 12:00 a.m.

Improper validation of certificates within the iOS application

2015-08-3100:00:00
owncloud.com
12

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6

Confidence

High

EPSS

0.001

Percentile

41.5%

The ownCloud iOS Library was vulnerable against a remotely exploitable certification problem until version 1.1.2. The vulnerable library version is used by the official ownCloud iOS client until version 3.4.4.

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6

Confidence

High

EPSS

0.001

Percentile

41.5%

Related for OWNCLOUD:00B0C28EE1D1ABD2905B99EC7FAEDF87