PT-2018-4187 · Owncloud · Owncloud Server

Publicado 2018-03-26 · Atualizado 2018-06-13 · CVE-2014-2048

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 5.0.15

Description The issue is related to an insecure OpenID implementation in the user openid app, allowing remote attackers to obtain unauthorized access.

Recommendations For ownCloud Server versions prior to 5.0.15, update to version 5.0.15 or later to resolve the issue.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2014-2048

Produtos afetados

Owncloud Server

Referências · 4

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2048 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/91973 · Nota
• https://owncloud.org/security/advisories/insecure-openid-implementation · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-2048 · Nota de Segurança