CVE-2013-1941 in ownCloud

Résumé

par MITRE

The installation routine in ownCloud Server before 4.0.14, 4.5.x before 4.5.9, and 5.0.x before 5.0.4 uses the time function to seed the generation of the PostgreSQL database user password, which makes it easier for remote attackers to guess the password via a brute force attack.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Réserver: 19/02/2013
• Divulgation: 04/06/2014
• Modérer: accepté
• Entrée: VDB-69919
• CPE: prêt
• CWE: CWE-310 (confirmé)
• CVSS: 5.0 (NVD)
• EPSS: 0.01116
• KEV: non
• Activités: très faible
• Secteur: Lawfirm, Industry, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-1941
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-1941
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-1941/