CVE-2015-6670: Undefined Security Weakness

ownCloud Server before 7.0.8, 8.0.x before 8.0.6, and 8.1.x before 8.1.1 does not properly check ownership of calendars, which allows remote authenticated users to read arbitrary calendars via the calid parameter to apps/calendar/export.php...

PT-2015-2580

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 7.0.8 ownCloud Server versions 8.0.x prior to 8.0.6 ownCloud Server versions 8.1.x prior to 8.1.1 Description The issue is related to improper ownership checking of calendars, allowing remote authenticated use...

PT-2014-2449

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 4.5.7 Description The issue allows remote authenticated users to read arbitrary calendars due to improper ownership checking of calendars. This can be achieved via the calid parameter to the...