PT-2014-2546 · Owncloud · Owncloud

Published 2014-03-14 · Updated 2014-03-17 · CVE-2013-2086

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ownCloud versions 5.0.x through 5.0.5

Description The configuration loader in ownCloud allows remote attackers to obtain sensitive information, including CSRF tokens, by reading an unspecified JavaScript file.

Recommendations For ownCloud versions 5.0.x through 5.0.5, update to version 5.0.6 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2013-2086

Affected Products

Owncloud

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2013-2086 · Security Note
• https://ubuntu.com/security/CVE-2013-2086 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-2086 · Vendor Advisory
• http://owncloud.org/about/security/advisories/oC-SA-2013-027 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2013-2086 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2086 · Note