ownCloud CVE-2014-2585 Security Bypass Vulnerability
BID:66451
Info
ownCloud CVE-2014-2585 Security Bypass Vulnerability
| Bugtraq ID: | 66451 |
| Class: | Access Validation Error |
| CVE: |
CVE-2014-2585 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 24 2014 12:00AM |
| Updated: | May 07 2015 05:15PM |
| Credit: | Lukas Reschke |
| Vulnerable: |
ownCloud ownCloud 6.0.1 ownCloud ownCloud 5.0.11 ownCloud ownCloud 5.0.10 ownCloud ownCloud 5.0.8 ownCloud ownCloud 5.0.7 ownCloud ownCloud 5.0.6 ownCloud ownCloud 5.0.5 ownCloud ownCloud 5.0.4 ownCloud ownCloud 5.0.3 ownCloud ownCloud 5.0.1 ownCloud ownCloud 5.0 ownCloud ownCloud 6.0.0 ownCloud ownCloud 5.0.9 ownCloud ownCloud 5.0.2 ownCloud ownCloud 5.0.14 ownCloud ownCloud 5.0.13 |
| Not Vulnerable: |
ownCloud ownCloud 6.0.2 ownCloud ownCloud 5.0.15 |
Discussion
ownCloud CVE-2014-2585 Security Bypass Vulnerability
ownCloud is prone to a security-bypass vulnerability.
Exploiting this issue could allow an attacker to bypass certain security restrictions and mount the local filesystem in the user's ownCloud.
ownCloud prior to 6.0.2 and 5.0.15 are vulnerable.
ownCloud is prone to a security-bypass vulnerability.
Exploiting this issue could allow an attacker to bypass certain security restrictions and mount the local filesystem in the user's ownCloud.
ownCloud prior to 6.0.2 and 5.0.15 are vulnerable.
Exploit / POC
ownCloud CVE-2014-2585 Security Bypass Vulnerability
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
ownCloud CVE-2014-2585 Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.