PT-2014-2435 · Owncloud · Owncloud

Publicado 2014-06-04 · Atualizado 2014-06-04 · CVE-2013-0204

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:N/AC:H/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ownCloud versions 4.5.x through 4.5.5

Description The issue allows remote authenticated users to execute arbitrary PHP code via crafted mount point settings in the settings/personal.php file.

Recommendations For ownCloud versions 4.5.x through 4.5.5, update to version 4.5.6 to resolve the issue.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2013-0204

Produtos afetados

Owncloud

Referências · 3

• http://owncloud.org/about/security/advisories/oC-SA-2013-002 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-0204 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0204 · Nota