CVE Vulnerabilities

CVE-2014-3835

Published: Jun 04, 2014 | Modified: Mar 31, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5.5 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not check permissions to the files_external application, which allows remote authenticated users to add external storage via unspecified vectors.

Affected Software

Name Vendor Start Version End Version
Owncloud_server Owncloud 6.0.0 (including) 6.0.0 (including)
Owncloud_server Owncloud 6.0.1 (including) 6.0.1 (including)
Owncloud_server Owncloud 6.0.2 (including) 6.0.2 (including)
Owncloud Ubuntu saucy *
Owncloud Ubuntu upstream *

References