CVEvulnerability

CVE-2015-4456

2.6 LOW Published 2015-10-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-10-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.6 LOW — AV:N/AC:H/Au:N/C:P/I:N/A:N

Description

ownCloud Desktop Client before 1.8.2 does not call QNetworkReply::ignoreSslErrors with the list of errors to be ignored, which allows man-in-the-middle attackers to bypass the user's certificate distrust decision and obtain sensitive information by leveraging a self-signed certificate and a connection to a server using its own self-signed certificate.

Affected configurations

• owncloud owncloud desktop client (<= 1.8.1)

References