Vulnerability in Owncloud

CVE-2014-3963

ownCloud Server before 6.0.1 does not properly check permissions, which allows remote authenticated users to access arbitrary preview pictures via unspecified vectors.

EPSS: 0.010 (59.6th percentile) — read the EPSS interpretation.

Affected products

Owncloud
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)