CVE-2015-5955 in ownCloud

Résumé

par MITRE

ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which might allow remote instance administrators to obtain sensitive credential and cookie information by reading authentication headers.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Réserver: 06/08/2015
• Divulgation: 29/10/2015
• Modérer: accepté
• Entrée: VDB-78951
• CPE: prêt
• CWE: CWE-200 (confirmé)
• CVSS: 5.0 (NVD)
• EPSS: 0.01093
• KEV: non
• Activités: très faible
• Secteur: Homeoffice

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-5955
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-5955
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-5955/