Information disclosure in Owncloud Server
CVE-2014-9049
The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote authenticated users to obtain all valid session IDs via an unspecified API method.
Vulnerability class: Information Disclosure
EPSS: 0.009 (57.6th percentile) — read the EPSS interpretation.
Affected products
- Owncloud Owncloud_server — versions 6.0.0, 6.0.1, 6.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)