Lucene search
Lukas Reschke – ownCloud Inc. ([email protected]) – Vulnerability discovery and disclosure.OWNCLOUD:692DA14B1EA54AE6F3948F14100FFE7CHistoryMay 14, 2013 - 6:11 p.m.
Password autocompletion - ownCloud
2013-05-1418:11:06
Lukas Reschke – ownCloud Inc. ([email protected]) – Vulnerability discovery and disclosure.
owncloud.org
23
EPSS
0.001
Percentile
36.5%
Index.php (aka the login page) contains a form that does not disable the autocomplete setting for the password parameter, which makes it easier for local users or physically proximate attackers to obtain the password from web browsers that support autocomplete.
Affected Software
- ownCloud Server < 5.0.6 (CVE-2013-2047)
Action Taken
It is recommended that all instances are upgraded to ownCloud Server 5.0.6.
Acknowledgements
The ownCloud team thanks the following people for their research and responsible disclosure of the above advisory:
- Lukas Reschke - ownCloud Inc. ([email protected]) - Vulnerability discovery and disclosure.
Related
cve
cve
CVE-2013-2047
2014-03-14 16:55:05
nvd
nvd
CVE-2013-2047
2014-03-14 16:55:05
ubuntucve
ubuntucve
CVE-2013-2047
2014-03-14 00:00:00
cvelist
cvelist
CVE-2013-2047
2014-03-14 16:00:00
owncloud
owncloud
Server: Password autocompletion
2013-05-14 11:42:22
prion
prion
Default credentials
2014-03-14 16:55:00
openvas
openvas
ownCloud Multiple Vulnerabilities - 01 (May 2014)
2014-05-06 00:00:00
freebsd
freebsd
owncloud -- Multiple security vulnerabilities
2013-05-14 00:00:00
nessus
nessus