Description

The login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting for the password parameter, which makes it easier for physically proximate attackers to guess the password.

Remediation

References

CVE-2013-2047

Related Vulnerabilities

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-2068)

WordPress 4.9.x Cross-Domain Flash Injection Vulnerability (4.9 - 4.9.1)

Collabtive Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8935)

MySQL CVE-2021-35621 Vulnerability (CVE-2021-35621)

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-4349)

Severity

Low

Classification

CVE-2013-2047 CWE-264

Tags

Missing Update Known Vulnerabilities