Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-4716
HistoryOct 21, 2015 - 12:00 a.m.

CVE-2015-4716

2015-10-2100:00:00
ubuntu.com
ubuntu.com
7

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.259 Low

EPSS

Percentile

96.7%

Directory traversal vulnerability in the routing component in ownCloud
Server before 7.0.6 and 8.0.x before 8.0.4, when running on Windows, allows
remote attackers to reinstall the application or execute arbitrary code via
unspecified vectors.

Notes

Author Note
mdeslaur owncloud packages in Ubuntu are now empty
seth-arnold advisory claims MS Windows but does not describe the mitigating factors on other platforms

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.259 Low

EPSS

Percentile

96.7%