CVE-2015-4456 in Desktop Client
Zusammenfassung (Englisch)
ownCloud Desktop Client before 1.8.2 does not call QNetworkReply::ignoreSslErrors with the list of errors to be ignored, allows man-in-the-middle attackers to bypass the user's certificate distrust decision and obtain sensitive information by leveraging a self-signed certificate and a connection to a server using its own self-signed certificate.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservieren
09.06.2015
Veröffentlichung
26.10.2015
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 78887 | ownCloud Desktop Client ignoreSslErrors schwache Authentisierung | 297 | Nicht definiert | Offizieller Fix | CVE-2015-4456 |