CVE Vulnerabilities

CVE-2014-3838

Published: Jun 04, 2014 | Modified: Jun 05, 2014
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not properly check permissions, which allows remote authenticated users to read the names of files of other users by leveraging access to multiple accounts.

Affected Software

Name Vendor Start Version End Version
Owncloud Owncloud 5.0.11 5.0.11
Owncloud Owncloud 5.0.6 5.0.6
Owncloud Owncloud 5.0.2 5.0.2
Owncloud Owncloud 5.0.3 5.0.3
Owncloud Owncloud 5.0.9 5.0.9
Owncloud Owncloud 5.0.7 5.0.7
Owncloud Owncloud 5.0.0 5.0.0
Owncloud Owncloud 5.0.14 5.0.14
Owncloud Owncloud 5.0.1 5.0.1
Owncloud Owncloud 5.0.12 5.0.12
Owncloud Owncloud 5.0.4 5.0.4
Owncloud Owncloud 5.0.13 5.0.13
Owncloud Owncloud 5.0.14 5.0.14
Owncloud Owncloud * 5.0.15
Owncloud Owncloud 5.0.8 5.0.8
Owncloud Owncloud 5.0.10 5.0.10
Owncloud Owncloud 5.0.5 5.0.5

References