CVE-2014-3835
5.5
Vector
AV:N/AC:L/Au:S/C:N/I:P/A:P
Exploitability: 8.0 / Impact: 4.9
Source: NVD
Description
ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not check permissions to the files_external application, which allows remote authenticated users to add external storage via unspecified vectors.
Affected (20)
Products: Owncloud: Owncloud Server, Owncloud
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 6.0.0 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 5.0.15 | |
| Version 5.0.0 |
Related CWEs
References (2)
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.