PT-2015-2592 · Owncloud · Owncloud Ios App

Publicado 2015-10-29 · Atualizado 2025-03-26 · CVE-2015-5955

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ownCloud iOS app versions prior to 3.4.4

Description The issue is related to the ownCloud iOS app and its web application for data synchronization, which lacks protection of service data. This might allow a remote attacker to obtain sensitive credential and cookie information by reading authentication headers.

Recommendations For ownCloud iOS app versions prior to 3.4.4, update to version 3.4.4 or later to resolve the issue.

Correção

Information Disclosure

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-200

CWE-522

Identificadores relacionados

BDU:2015-11957

CVE-2015-5955

Produtos afetados

Owncloud Ios App

Referências · 5

• https://owncloud.org/security/advisory/?id=oc-sa-2015-013 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-11957 · Nota de Segurança
• https://t.me/cvenotify/116372 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2015-5955 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5955 · Nota