Description
index.php in ownCloud 4.0.7 does not properly validate the oc_token cookie, which allows remote attackers to bypass authentication via a crafted oc_token cookie value.
Remediation
References
Related Vulnerabilities
WordPress Plugin Events Calendar for Google Local File Inclusion (2.1.0)
WordPress Plugin Ads Pro-Multi-Purpose WordPress Advertising Manager Multiple Vulnerabilities (3.4)
Jenkins Missing Authorization Vulnerability (CVE-2017-1000400)
WordPress Plugin Timed Popup Cross-Site Request Forgery (1.3)
WordPress Plugin Royal PrettyPhoto Cross-Site Scripting (1.2)