4
CVE-2014-3838
- EPSS 0.13%
- Published 04.06.2014 14:55:04
- Last modified 12.04.2025 10:46:40
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not properly check permissions, which allows remote authenticated users to read the names of files of other users by leveraging access to multiple accounts.
Data is provided by the National Vulnerability Database (NVD)
Owncloud ≫ Owncloud Server Version5.0.0
Owncloud ≫ Owncloud Server Version5.0.1
Owncloud ≫ Owncloud Server Version5.0.2
Owncloud ≫ Owncloud Server Version5.0.3
Owncloud ≫ Owncloud Server Version5.0.4
Owncloud ≫ Owncloud Server Version5.0.5
Owncloud ≫ Owncloud Server Version5.0.6
Owncloud ≫ Owncloud Server Version5.0.7
Owncloud ≫ Owncloud Server Version5.0.8
Owncloud ≫ Owncloud Server Version5.0.9
Owncloud ≫ Owncloud Server Version5.0.10
Owncloud ≫ Owncloud Server Version5.0.11
Owncloud ≫ Owncloud Server Version5.0.12
Owncloud ≫ Owncloud Server Version5.0.13
Owncloud ≫ Owncloud Server Version5.0.14
Owncloud ≫ Owncloud Server Version5.0.14 Updatea
Owncloud ≫ Owncloud Server Version6.0.0
Owncloud ≫ Owncloud Server Version6.0.1
Owncloud ≫ Owncloud Server Version6.0.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.13% | 0.297 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:P/I:N/A:N
|