Description

The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote authenticated users to obtain all valid session IDs via an unspecified API method.

Remediation

References

CVE-2014-9049

Related Vulnerabilities

NuSOAP Improper Certificate Validation Vulnerability (CVE-2012-6071)

MySQL CVE-2014-6491 Vulnerability (CVE-2014-6491)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-4408)

WordPress Plugin WatuPRO Multiple Vulnerabilities (4.8.8.4)

WordPress Plugin Cart66 Lite::WordPress Ecommerce SQL Injection (1.5.1.17)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2014-9049