CVE-2014-9047 Multiple unspecified vulnerabilities in the preview system in ownCloud 6.x before 6.0.6 and 7.x before 7.0.3 allow remote attackers to read arbitrary files via unknown vectors.
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in the preview system in ownCloud 6.x before 6.0.6 and 7.x before 7.0.3 allow remote attackers to read arbitrary files via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| owncloud | <= 5.0.17 | No fix listed |
| owncloud server | = 5.0.0 | No fix listed |
| owncloud server | = 5.0.1 | No fix listed |
| owncloud server | = 5.0.2 | No fix listed |
| owncloud server | = 5.0.3 | No fix listed |
| owncloud server | = 5.0.4 | No fix listed |
| owncloud server | = 5.0.5 | No fix listed |
| owncloud server | = 5.0.6 | No fix listed |
| owncloud server | = 5.0.7 | No fix listed |
| owncloud server | = 5.0.8 | No fix listed |
| owncloud server | = 5.0.9 | No fix listed |
| owncloud server | = 5.0.10 | No fix listed |
| owncloud server | = 5.0.11 | No fix listed |
| owncloud server | = 5.0.12 | No fix listed |
| owncloud server | = 5.0.13 | No fix listed |
| owncloud server | = 5.0.14 | No fix listed |
| owncloud server | = 5.0.14-a | No fix listed |
| owncloud server | = 5.0.15 | No fix listed |
| owncloud server | = 5.0.16 | No fix listed |
| owncloud server | = 6.0.0 | No fix listed |
| owncloud server | = 6.0.1 | No fix listed |
| owncloud server | = 6.0.2 | No fix listed |
| owncloud server | = 6.0.3 | No fix listed |
| owncloud server | = 6.0.4 | No fix listed |
| owncloud server | = 6.0.5 | No fix listed |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| owncloud server | = 7.0.0 | No fix listed |
| owncloud server | = 7.0.1 | No fix listed |
| owncloud server | = 7.0.2 | No fix listed |
References
- owncloud.org vendor-advisory