PT-2017-10152 · Owncloud+1 · Owncloud Server+1

Detroitsmash + 1 · Published 2017-03-28 · Updated 2019-10-09 · CVE-2016-9461

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions prior to 9.0.52 ownCloud Server versions prior to 9.0.4

Description The issue arises from improper verification of edit check permissions on WebDAV copy actions. Specifically, the WebDAV endpoint did not properly check permissions during a WebDAV COPY action. This allowed an authenticated attacker with access to a read-only share to upload new files, although modifying existing files was not possible.

Recommendations For Nextcloud Server versions prior to 9.0.52, update to version 9.0.52 or later. For ownCloud Server versions prior to 9.0.4, update to version 9.0.4 or later.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

CWE-275

Related Identifiers

CVE-2016-9461

Affected Products

Nextcloud Server

Owncloud Server

References · 12

• 🔥 https://hackerone.com/reports/145950 · Exploit
• https://github.com/nextcloud/server/commit/3491400261c1454a9a30d3ec96969573330120cc · Patch
• https://github.com/owncloud/core/commit/c0a4b7b3f38ad2eaf506484b3b92ec678cb021c9 · Patch
• https://github.com/owncloud/core/commit/0622e635d97cb17c5e1363e370bb8268cc3d2547 · Patch
• https://github.com/owncloud/core/commit/121a3304a0c37ccda0e1b63ddc528cba9121a36e · Patch
• https://github.com/owncloud/core/commit/acbbadb71ceee7f01da347f7dcd519beda78cc47 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2016-9461 · Security Note
• https://osv.dev/vulnerability/CVE-2016-9461 · Vendor Advisory
• https://owncloud.org/security/advisory/?id=oc-sa-2016-014 · Vendor Advisory
• https://nextcloud.com/security/advisory/?id=nc-sa-2016-004 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9461 · Note
• http://securityfocus.com/bid/97276 · Note