Authentication flaw

2021-02-1907:15:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.6%

An issue was discovered in ownCloud before 10.4. An attacker can bypass authentication on a password-protected image by displaying its preview.

CPENameOperatorVersion
owncloudlt10.4.0

CPE	Name	Operator	Version
	owncloud	lt	10.4.0

References

blog.hacktivesecurity.com/index.php?controller=post&action=view&id_post=44

owncloud.com/security-advisories/public-link-password-bypass-via-image-previews/

owncloud.org/changelog/server/