Description

The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote attackers to bypass the password-protection for shared files via the API.

Remediation

References

CVE-2014-9048

Related Vulnerabilities

Oracle Database Server CVE-2007-2118 Vulnerability (CVE-2007-2118)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-2510)

OpenSSL Cryptographic Issues Vulnerability (CVE-2019-1543)

Apache HTTP Server Improper Encoding or Escaping of Output Vulnerability (CVE-2024-38473)

RubyGems Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-1000075)

Severity

Medium

Classification

CVE-2014-9048 CWE-264

Tags

Missing Update Known Vulnerabilities