CVEvulnerability
CVE-2013-2047
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-03-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
The login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting for the password parameter, which makes it easier for physically proximate attackers to guess the password.
Affected configurations
• owncloud owncloud (<= 5.0.5)
• owncloud owncloud server 5.0.0
• owncloud owncloud server 5.0.1
• owncloud owncloud server 5.0.2
• owncloud owncloud server 5.0.3
• owncloud owncloud server 5.0.4
Related
Weakness · not in database (1)
References
- http://owncloud.org/about/security/advisories/oC-SA-2013-023/ Patch, Vendor Advisory
- http://owncloud.org/about/security/advisories/oC-SA-2013-023/ Patch, Vendor Advisory