CVE Vulnerabilities

CVE-2012-5665

Published: Jan 03, 2013 | Modified: Mar 31, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

ownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 does not properly restrict access to settings.php, which allows remote attackers to edit app configurations of user_webdavauth and user_ldap by editing this file.

Affected Software

Name Vendor Start Version End Version
Owncloud_server Owncloud 4.0.0 (including) 4.0.0 (including)
Owncloud_server Owncloud 4.0.1 (including) 4.0.1 (including)
Owncloud_server Owncloud 4.0.2 (including) 4.0.2 (including)
Owncloud_server Owncloud 4.0.3 (including) 4.0.3 (including)
Owncloud_server Owncloud 4.0.4 (including) 4.0.4 (including)
Owncloud_server Owncloud 4.0.5 (including) 4.0.5 (including)
Owncloud_server Owncloud 4.0.6 (including) 4.0.6 (including)
Owncloud_server Owncloud 4.0.7 (including) 4.0.7 (including)
Owncloud_server Owncloud 4.0.8 (including) 4.0.8 (including)
Owncloud_server Owncloud 4.0.9 (including) 4.0.9 (including)
Owncloud Ubuntu oneiric *
Owncloud Ubuntu quantal *
Owncloud Ubuntu raring *
Owncloud Ubuntu saucy *
Owncloud Ubuntu upstream *

References