PT-2014-4452 · Owncloud · Owncloud Server

Published 2014-06-05 · Updated 2014-06-24 · CVE-2014-2051

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 5.0.15 ownCloud Server versions 6.0.x prior to 6.0.2

Description The issue allows remote attackers to conduct an LDAP injection attack via unspecified vectors, as demonstrated using a "login query."

Recommendations For ownCloud Server versions prior to 5.0.15, update to version 5.0.15 or later. For ownCloud Server versions 6.0.x prior to 6.0.2, update to version 6.0.2 or later.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2014-2051

Affected Products

Owncloud Server

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-2051 · Security Note
• http://owncloud.org/about/security/advisories/oC-SA-2014-005 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2051 · Note