Vulnerability in Owncloud

CVE-2014-3834

ownCloud Server before 6.0.3 does not properly check permissions, which allows remote authenticated users to (1) access the contacts of other users via the address book or (2) rename files via unspecified vectors.

EPSS: 0.014 (69.6th percentile) — read the EPSS interpretation.

Affected products

Owncloud
Owncloud Owncloud_server — versions 6.0.0, 6.0.1
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)