CVE-2015-5955 in ownCloud

الملخص

بحسب MITRE

ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which might allow remote instance administrators to obtain sensitive credential and cookie information by reading authentication headers.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• حجز: 06/08/2015
• إفشاء: 29/10/2015
• الاعتدال: تمت الموافقة
• إدخال: VDB-78951
• CPE: جاهز
• CWE: CWE-200 (مؤكد)
• CVSS: 5.0 (NVD)
• EPSS: 0.01093
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Homeoffice

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-5955
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-5955
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-5955/