CVE-2014-9049 The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote authenticated users to obtain all valid session IDs via an unspecified API method.
MediumCVSS 4.0
EPSS 0.95%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote authenticated users to obtain all valid session IDs via an unspecified API method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| owncloud server | = 6.0.0 | No fix listed |
| owncloud server | = 6.0.1 | No fix listed |
| owncloud server | = 6.0.2 | No fix listed |
| owncloud server | = 6.0.3 | No fix listed |
| owncloud server | = 6.0.4 | No fix listed |
| owncloud server | = 6.0.5 | No fix listed |
| owncloud server | = 7.0.0 | No fix listed |
| owncloud server | = 7.0.1 | No fix listed |
| owncloud server | = 7.0.2 | No fix listed |
References
- owncloud.org vendor-advisory