4
CVSSv2

CVE-2014-3838

Published: 04/06/2014 Updated: 05/06/2014
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

ownCloud Server prior to 5.0.16 and 6.0.x prior to 6.0.3 does not properly check permissions, which allows remote authenticated users to read the names of files of other users by leveraging access to multiple accounts.

Vulnerable Product Search on Vulmon Subscribe to Product

owncloud owncloud 5.0.0

owncloud owncloud 5.0.1

owncloud owncloud 5.0.10

owncloud owncloud 5.0.8

owncloud owncloud 5.0.9

owncloud owncloud 5.0.12

owncloud owncloud 5.0.14

owncloud owncloud 5.0.4

owncloud owncloud 5.0.6

owncloud owncloud

owncloud owncloud 5.0.2

owncloud owncloud 5.0.3

owncloud owncloud 5.0.11

owncloud owncloud 5.0.13

owncloud owncloud 5.0.5

owncloud owncloud 5.0.7

owncloud owncloud 6.0.0

owncloud owncloud 6.0.1

owncloud owncloud 6.0.2