ownCloud CVE-2014-2049 Cross Domain Information Disclosure Vulnerability

Bugtraq ID:	66229
Class:	Origin Validation Error
CVE:	CVE-2014-2049
Remote:	Yes
Local:	No
Published:	Mar 07 2014 12:00AM
Updated:	Mar 07 2014 12:00AM
Credit:	Lukas Reschke
Vulnerable:	ownCloud ownCloud 6.0.1 ownCloud ownCloud 5.0.11 ownCloud ownCloud 5.0.10 ownCloud ownCloud 5.0.8 ownCloud ownCloud 5.0.7 ownCloud ownCloud 5.0.6 ownCloud ownCloud 5.0.5 ownCloud ownCloud 5.0.4 ownCloud ownCloud 5.0.3 ownCloud ownCloud 5.0.1 ownCloud ownCloud 5.0 ownCloud ownCloud 6.0.0a ownCloud ownCloud 5.0.9 ownCloud ownCloud 5.0.2 ownCloud ownCloud 5.0.14 A ownCloud ownCloud 5.0.14 ownCloud ownCloud 5.0.13 ownCloud ownCloud 5.0.12
Not Vulnerable:	ownCloud ownCloud 6.0.2 ownCloud ownCloud 5.0.15

ownCloud CVE-2014-2049 Cross Domain Information Disclosure Vulnerability

Attackers can exploit this issue by tricking an unsuspecting victim into visiting a malicious web page.

ownCloud CVE-2014-2049 Cross Domain Information Disclosure Vulnerability

References:

• Insecure Flash Cross Domain policies (oC-SA-2014-003) (ownCloud)
  
• ownCloud Homepage (ownCloud)