What is CVE-2020-16144?

CVE-2020-16144 is a medium-severity vulnerability in Owncloud Files Antivirus, classified under Incorrect Default Permissions. CVSS score: 5.7/10. Published 2021-02-09.

How severe is CVE-2020-16144?

Medium severity. CVSS v3 base score is 5.7 out of 10.

Vulnerability in Owncloud Files Antivirus

CVE-2020-16144

When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous users can upload files, and another user uploads a virus the files antivirus app would detect the virus but fails to delete it due to permission issues. This affects the files_antivirus component versions before 0.15.2 for ownCloud.

EPSS: 0.008 (52.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.7 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N.

Affected products

Owncloud Files_antivirus
N/a — versions n/a

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-16144?: CVE-2020-16144 is a medium-severity vulnerability in Owncloud Files Antivirus, classified under Incorrect Default Permissions. CVSS score: 5.7/10. Published 2021-02-09.
How severe is CVE-2020-16144?: Medium severity. CVSS v3 base score is 5.7 out of 10.