Desktop Client: Improper validation of certificates when using self-signed certificates

The ownCloud Desktop Client was vulnerable against MITM attacks until version 2.0.0 in combination with self-signed certificates. To be exploitable the following conditions have to be met: The connection to the remote ownCloud server must be secured using a self-signed certificate which the user...

Improper validation of certificates when using self-signed certificates - ownCloud

The ownCloud Desktop Client was vulnerable against MITM attacks until version 2.0.0 in combination with self-signed certificates. To be exploitable the following conditions have to be met: The connection to the remote ownCloud server must be secured using a self-signed certificate which the user...

PT-2015-7512

Name of the Vulnerable Software and Affected Versions ownCloud Desktop Client versions prior to 2.0.1 Description The issue allows remote attackers to conduct man-in-the-middle MITM attacks by leveraging a server using a self-signed certificate. This occurs because the client does not properly...