CVE-2013-2086

EPSS 0.25%
Veröffentlicht 14.03.2014 16:55:05
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

The configuration loader in ownCloud 5.0.x before 5.0.6 allows remote attackers to obtain CSRF tokens and other sensitive information by reading an unspecified JavaScript file.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Owncloud ≫ Owncloud Server Version5.0.0

Owncloud ≫ Owncloud Server Version5.0.1

Owncloud ≫ Owncloud Server Version5.0.2

Owncloud ≫ Owncloud Server Version5.0.3

Owncloud ≫ Owncloud Server Version5.0.4

Owncloud ≫ Owncloud Server Version5.0.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.25%	0.455

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://owncloud.org/about/security/advisories/oC-SA-2013-027/

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2013-2086

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-2086

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-2086

EUVD