Enumeration of shared files in documents - ownCloud

Due to using the auto-incrementing file_id instead of the random generated token to access files in the documents app an authenticated users could enumerate shared files of other users.

Affected Software

• ownCloud Server < 6.0.3 (CVE-2014-3837)

Action Taken

We replaced the usage of file_id with our random generated file sharing token.

Acknowledgements

The ownCloud team thanks the following people for their research and responsible disclosure of the above advisory:

• Lukas Reschke - ownCloud Inc. ([email protected]) - Vulnerability discovery and disclosure.