PT-2021-11985 · Owncloud · Owncloud Server

Published 2021-02-19 · Updated 2021-07-21 · CVE-2020-36251

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions: ownCloud Server versions prior to 10.3.0

Description: The issue allows an attacker with non-administrative access to a group share to remove everyone else's access to that share.

Recommendations: For ownCloud Server versions prior to 10.3.0, update to version 10.3.0 or later to resolve the issue.

Fix

Related Identifiers

CVE-2020-36251

Affected Products

Owncloud Server

References · 5

• https://owncloud.com/security-advisories/deleting-received-group-share-for-whole-group · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-36251 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-36251 · Security Note
• https://t.me/cvenotify/10132 · Telegram Post
• https://t.me/cibsecurity/23843 · Telegram Post