CVEvulnerability
CVE-2014-3834
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-06-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
ownCloud Server before 6.0.3 does not properly check permissions, which allows remote authenticated users to (1) access the contacts of other users via the address book or (2) rename files via unspecified vectors.
Affected configurations
• owncloud owncloud (<= 6.0.2)
• owncloud owncloud server 6.0.0
• owncloud owncloud server 6.0.1
Related
Weakness · not in database (1)
References
- http://owncloud.org/about/security/advisories/oc-sa-2014-011/ Vendor Advisory
- http://owncloud.org/about/security/advisories/oc-sa-2014-013/ Vendor Advisory
- http://owncloud.org/about/security/advisories/oc-sa-2014-011/ Vendor Advisory
- http://owncloud.org/about/security/advisories/oc-sa-2014-013/ Vendor Advisory