5
CVSSv2

CVE-2014-9046

Published: 04/02/2015 Updated: 05/02/2015
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

The OC_Util::getUrlContent function in ownCloud Server prior to 5.0.18, 6.x prior to 6.0.6, and 7.x prior to 7.0.3 allows remote malicious users to read arbitrary files via a file:// protocol.

Vulnerable Product Search on Vulmon Subscribe to Product

owncloud owncloud 5.0.2

owncloud owncloud 5.0.3

owncloud owncloud 5.0.4

owncloud owncloud 5.0.5

owncloud owncloud 5.0.11

owncloud owncloud 5.0.12

owncloud owncloud 5.0.13

owncloud owncloud 5.0.14

owncloud owncloud 6.0.0

owncloud owncloud 6.0.1

owncloud owncloud 6.0.2

owncloud owncloud 6.0.3

owncloud owncloud 5.0.1

owncloud owncloud 5.0.15

owncloud owncloud

owncloud owncloud 5.0.6

owncloud owncloud 5.0.8

owncloud owncloud 6.0.5

owncloud owncloud 7.0.1

owncloud owncloud 5.0.0

owncloud owncloud 5.0.10

owncloud owncloud 5.0.16

owncloud owncloud 5.0.7

owncloud owncloud 5.0.9

owncloud owncloud 6.0.4

owncloud owncloud 7.0.0

owncloud owncloud 7.0.2