ownCloud owncloud/android prior to 2.20 has Incorrect Access Control for physically proximate attackers.
owncloud owncloud