Description
ownCloud Server before 6.0.1 does not properly check permissions, which allows remote authenticated users to access arbitrary preview pictures via unspecified vectors.
Remediation
References
Related Vulnerabilities
WordPress Plugin Premmerce Wholesale Pricing for WooCommerce Security Bypass (1.1.3)
PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5288)
Drupal Core 9.1.x Cross-Site Request Forgery (9.1.0 - 9.1.12)
WordPress Plugin Advanced AJAX Product Filters Security Bypass (1.3.6.1)
Ruby on Rails Improper Access Control Vulnerability (CVE-2015-7577)