CVE-2012-5607 in ownCloud
Summary
The "Lost Password" reset functionality in ownCloud before 4.0.9 and 4.5.0 does not properly check the security token, which allows remote attackers to change an accounts password via unspecified vectors related to a "Remote Timing Attack."
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
10/24/2012
Disclosure
12/17/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 63199 | ownCloud credentials management | 255 | Not defined | Official fix | CVE-2012-5607 |