PT-2015-2581 · Owncloud · Owncloud Server
Martin Macht
·
Published
2015-09-18
·
Updated
2017-11-04
·
CVE-2015-6500
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:S/C:P/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
ownCloud Server versions prior to 8.0.6
ownCloud Server versions 8.1.x prior to 8.1.1
Description
The issue allows remote authenticated users to list directory contents and possibly cause a denial of service via a .. (dot dot) in the
dir parameter to "index.php/apps/files/ajax/scan.php". This is due to incorrect restriction of the directory path name with limited access. An attacker can exploit this to read the directory contents or cause a denial of service by manipulating the parameter in "index.php/apps/files/ajax/scan.php".Recommendations
For ownCloud Server versions prior to 8.0.6, update to version 8.0.6 or later.
For ownCloud Server versions 8.1.x prior to 8.1.1, update to version 8.1.1 or later.
As a temporary workaround, consider restricting access to the "index.php/apps/files/ajax/scan.php" endpoint to minimize the risk of exploitation. Avoid using the
dir parameter in the affected API endpoint until the issue is resolved.Fix
DoS
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Owncloud Server