Lucene search
Ubuntu.comUB:CVE-2013-2047HistoryMar 14, 2014 - 12:00 a.m.
CVE-2013-2047
2014-03-1400:00:00
ubuntu.com
ubuntu.com
8
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
EPSS
0.001
Percentile
36.5%
The login page (aka index.php) in ownCloud before 5.0.6 does not disable
the autocomplete setting for the password parameter, which makes it easier
for physically proximate attackers to guess the password.
Notes
| Author | Note |
|---|---|
| jdstrand | per upstream, 5.0 only |
Related
cve
cve
CVE-2013-2047
2014-03-14 16:55:05
nvd
nvd
CVE-2013-2047
2014-03-14 16:55:05
owncloud
owncloud
Password autocompletion - ownCloud
2013-05-14 18:11:06
Server: Password autocompletion
2013-05-14 11:42:22
cvelist
cvelist
CVE-2013-2047
2014-03-14 16:00:00
prion
prion
Default credentials
2014-03-14 16:55:00
openvas
openvas
ownCloud Multiple Vulnerabilities - 01 (May 2014)
2014-05-06 00:00:00
freebsd
freebsd
owncloud -- Multiple security vulnerabilities
2013-05-14 00:00:00
nessus
nessus
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
EPSS
0.001
Percentile
36.5%
Related for UB:CVE-2013-2047