Description

The SFTP external storage driver (files_external) in ownCloud Server before 6.0.5 validates the RSA Host key after login, which allows remote attackers to obtain sensitive information by sniffing the network.

Remediation

References

CVE-2014-5341

Related Vulnerabilities

Joomla Improper Access Control Vulnerability (CVE-2016-9836)

WordPress Plugin Embed Youtube Video SQL Injection (1.0)

WordPress Plugin Admin Bar User Switching Cross-Site Scripting (1.0.4)

WordPress Plugin File Manager Cross-Site Request Forgery (3.0.1)

WordPress Plugin Elements For Elementor Local File Inclusion (2.1)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2014-5341