PT-2017-18854 · Owncloud · Owncloud Server

Published 2017-07-17 · Updated 2022-09-21 · CVE-2017-9339

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 10.0.2

Description A logical error in the software caused the disclosure of valid share tokens for public calendars, potentially granting an attacker access to publicly shared calendars without knowing the share token.

Recommendations For versions prior to 10.0.2, update to version 10.0.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2017-9339

Affected Products

Owncloud Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-9339 · Security Note
• https://osv.dev/vulnerability/CVE-2017-9339 · Vendor Advisory
• https://owncloud.org/security/advisory/?id=oc-sa-2017-005 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9339 · Note