CVE-2014-2048 The user_openid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID implementation.
CriticalCVSS 9.8
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The user_openid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID implementation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| owncloud | < 5.0.15 | 5.0.15 |
References
- owncloud-cve20142048-sec-bypass(91973) third-party-advisory vdb-entry
- owncloud.org vendor-advisory