Vulnerability in Owncloud Client

CVE-2015-5955

ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which might allow remote instance administrators to obtain sensitive credential and cookie information by reading authentication headers.

EPSS: 0.011 (62.0th percentile) — read the EPSS interpretation.

Affected products

Owncloud Owncloud_client
N/a — versions n/a

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials

References

cve@mitre.org (x_refsource_CONFIRM, Broken Link, Vendor Advisory)