CVE-2017-0894 in Server

요약

\~에 의해 MITRE

Nextcloud Server before 11.0.3 is vulnerable to disclosure of valid share tokens for public calendars due to a logical error. Thus granting an attacker potentially access to publicly shared calendars without knowing the share token.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• 예약하다: 2016. 11. 30.
• 공개: 2017. 05. 08.
• 모더레이션: 수락
• 항목: VDB-100936
• CPE: 준비됨
• CWE: CWE-200 (확인됨)
• CVSS: 4.3 (NVD)
• EPSS: 0.00793
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Government, Education, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-0894
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-0894
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-0894/