CVE-2016-1500 ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2, when the "file_versions" application is enabled, does not properly check the return value of getOwner, w...
LowCVSS 3.1
EPSS 0.85%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2, when the "file_versions" application is enabled, does not properly check the return value of getOwner, which allows remote authenticated users to read the files with names starting with ".v" and belonging to a sharing user by leveraging an incoming share.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| owncloud | <= 7.0.11 | No fix listed |
| owncloud | = 8.2.0 | No fix listed |
| owncloud | = 8.2.1 | No fix listed |
| owncloud server | = 8.0.0 | No fix listed |
| owncloud server | = 8.0.2 | No fix listed |
| owncloud server | = 8.0.3 | No fix listed |
| owncloud server | = 8.0.4 | No fix listed |
| owncloud server | = 8.0.5 | No fix listed |
| owncloud server | = 8.0.6 | No fix listed |
| owncloud server | = 8.0.8 | No fix listed |
| owncloud server | = 8.0.9 | No fix listed |
| owncloud server | = 8.1.0 | No fix listed |
| owncloud server | = 8.1.1 | No fix listed |
| owncloud server | = 8.1.3 | No fix listed |
| owncloud server | = 8.1.4 | No fix listed |
References
- owncloud.org vendor-advisory