CVEvulnerability
CVE-2014-3838
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-06-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not properly check permissions, which allows remote authenticated users to read the names of files of other users by leveraging access to multiple accounts.
Affected configurations
• owncloud owncloud (<= 5.0.15)
• owncloud owncloud server 5.0.0
• owncloud owncloud server 5.0.1
• owncloud owncloud server 5.0.2
• owncloud owncloud server 5.0.3
• owncloud owncloud server 5.0.4
• owncloud owncloud server 5.0.5
• owncloud owncloud server 5.0.6
• owncloud owncloud server 5.0.7
• owncloud owncloud server 5.0.8
• owncloud owncloud server 5.0.9
• owncloud owncloud server 5.0.10
• owncloud owncloud server 5.0.11
• owncloud owncloud server 5.0.12
• owncloud owncloud server 5.0.13
• owncloud owncloud server 5.0.14
• owncloud owncloud server 6.0.0
• owncloud owncloud server 6.0.1
• owncloud owncloud server 6.0.2
Related
Weakness · not in database (1)
References
- http://owncloud.org/about/security/advisories/oc-sa-2014-016/ Vendor Advisory
- http://owncloud.org/about/security/advisories/oc-sa-2014-016/ Vendor Advisory