CVE-2017-9339

EPSS 0.24%
Published 17.07.2017 21:29:00
Last modified 20.04.2025 01:37:25
Source cve@mitre.org
Teams watchlist Login
Open Login

A logical error in ownCloud Server before 10.0.2 caused disclosure of valid share tokens for public calendars. Thus granting an attacker potentially access to publicly shared calendars without knowing the share token.

Affected products Warnungen 0 Metrics 3 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Owncloud ≫ Owncloud Version < 10.0.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.24%	0.468

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

https://owncloud.org/security/advisory/?id=oc-sa-2017-005

Vendor Advisory

Broken Link

https://nvd.nist.gov/vuln/detail/CVE-2017-9339

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-9339

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-9339

EUVD