An issue exists in ownCloud prior to 10.4. An attacker can bypass authentication on a password-protected image by displaying its preview.
owncloud owncloud