CVE Vulnerabilities

CVE-2013-1963

Published: Mar 14, 2014 | Modified: Mar 31, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

The contacts application in ownCloud before 4.5.10 and 5.x before 5.0.5 does not properly check the ownership of contacts, which allows remote authenticated users to download arbitrary contacts via unspecified vectors.

Affected Software

Name Vendor Start Version End Version
Owncloud Owncloud * 4.5.9 (including)
Owncloud_server Owncloud 4.5.0 (including) 4.5.0 (including)
Owncloud_server Owncloud 4.5.1 (including) 4.5.1 (including)
Owncloud_server Owncloud 4.5.2 (including) 4.5.2 (including)
Owncloud_server Owncloud 4.5.3 (including) 4.5.3 (including)
Owncloud_server Owncloud 4.5.4 (including) 4.5.4 (including)
Owncloud_server Owncloud 4.5.5 (including) 4.5.5 (including)
Owncloud_server Owncloud 4.5.6 (including) 4.5.6 (including)
Owncloud_server Owncloud 4.5.7 (including) 4.5.7 (including)
Owncloud_server Owncloud 4.5.8 (including) 4.5.8 (including)
Owncloud_server Owncloud 5.0.0 (including) 5.0.0 (including)
Owncloud_server Owncloud 5.0.1 (including) 5.0.1 (including)
Owncloud_server Owncloud 5.0.2 (including) 5.0.2 (including)
Owncloud_server Owncloud 5.0.3 (including) 5.0.3 (including)
Owncloud_server Owncloud 5.0.4 (including) 5.0.4 (including)
Owncloud Ubuntu raring *
Owncloud Ubuntu upstream *

References