4

CVE-2012-5336

lib/base.php in ownCloud before 4.0.8 does not properly validate the user_id session variable, which allows remote authenticated users to read arbitrary files via vectors related to WebDAV.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Owncloud ≫ Owncloud Version <= 4.0.7
Owncloud ≫ Owncloud Server Version 4.0.0
Owncloud ≫ Owncloud Server Version 4.0.1
Owncloud ≫ Owncloud Server Version 4.0.2
Owncloud ≫ Owncloud Server Version 4.0.3
Owncloud ≫ Owncloud Server Version 4.0.4
Owncloud ≫ Owncloud Server Version 4.0.5
Owncloud ≫ Owncloud Server Version 4.0.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.01% 0.586
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://owncloud.org/about/security/advisories/CVE-2012-5336/
Vendor Advisory