CVE-2015-6670

EPSS 0.18%
Published 26.10.2015 14:59:09
Last modified 12.04.2025 10:46:40
Source cve@mitre.org
Teams watchlist Login
Open Login

ownCloud Server before 7.0.8, 8.0.x before 8.0.6, and 8.1.x before 8.1.1 does not properly check ownership of calendars, which allows remote authenticated users to read arbitrary calendars via the calid parameter to apps/calendar/export.php.

Affected products Warnungen 0 Metrics 2 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Owncloud ≫ Owncloud Server Version7.0.0

Owncloud ≫ Owncloud Server Version7.0.1

Owncloud ≫ Owncloud Server Version7.0.2

Owncloud ≫ Owncloud Server Version7.0.3

Owncloud ≫ Owncloud Server Version7.0.4

Owncloud ≫ Owncloud Server Version7.0.5

Owncloud ≫ Owncloud Server Version7.0.6

Owncloud ≫ Owncloud Server Version7.0.7

Owncloud ≫ Owncloud Server Version8.0.0

Owncloud ≫ Owncloud Server Version8.0.2

Owncloud ≫ Owncloud Server Version8.0.3

Owncloud ≫ Owncloud Server Version8.0.4

Owncloud ≫ Owncloud Server Version8.0.5

Owncloud ≫ Owncloud Server Version8.1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.18%	0.395

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N

http://www.debian.org/security/2015/dsa-3373

https://owncloud.org/security/advisory/?id=oc-sa-2015-015

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2015-6670

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-6670

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-6670

EUVD