Vulnerability in Owncloud

CVE-2013-2047

The login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting for the password parameter, which makes it easier for physically proximate attackers to guess the password.

EPSS: 0.004 (30.0th percentile) — read the EPSS interpretation.

Affected products

Owncloud
Owncloud Owncloud_server — versions 5.0.0, 5.0.1, 5.0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

secalert@redhat.com (x_refsource_CONFIRM, Patch, Vendor Advisory)