PT-2015-2580 · Owncloud · Owncloud Server

Published 2015-09-18 · Updated 2017-11-04 · CVE-2015-6670

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 7.0.8 ownCloud Server versions 8.0.x prior to 8.0.6 ownCloud Server versions 8.1.x prior to 8.1.1

Description The issue is related to improper ownership checking of calendars, allowing remote authenticated users to read arbitrary calendars. This can be achieved by manipulating the calid parameter in the "apps/calendar/export.php" endpoint. The vulnerability is associated with an authorization bypass via a user-controlled key, enabling a remote attacker to read data from arbitrary calendars.

Recommendations For ownCloud Server versions prior to 7.0.8, update to version 7.0.8 or later. For ownCloud Server versions 8.0.x prior to 8.0.6, update to version 8.0.6 or later. For ownCloud Server versions 8.1.x prior to 8.1.1, update to version 8.1.1 or later. As a temporary workaround, consider restricting access to the "apps/calendar/export.php" endpoint to minimize the risk of exploitation. Avoid using the calid parameter in the affected endpoint until the issue is resolved.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

BDU:2015-11945

CVE-2015-6670

DSA-3373-1

MGASA-2015-0378

Affected Products

Owncloud Server

References · 29

• https://bdu.fstec.ru/vul/2015-11945 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5954 · Security Note
• https://owncloud.org/security/advisory/?id=oc-sa-2015-015 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-6670 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5953 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4717 · Security Note
• https://bdu.fstec.ru/vul/2015-11937 · Security Note
• https://osv.dev/vulnerability/DSA-3373-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11826 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4718 · Security Note
• https://advisories.mageia.org/MGASA-2015-0378.html · Security Note
• https://osv.dev/vulnerability/MGASA-2015-0378 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11827 · Security Note
• http://debian.org/security/2015/dsa-3373 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11943 · Security Note