CVE-2015-5955 in ownCloud

Sumário

de MITRE

ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which might allow remote instance administrators to obtain sensitive credential and cookie information by reading authentication headers.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservar: 06/08/2015
• Divulgação: 29/10/2015
• Moderação: aceite
• Entrada: VDB-78951
• CPE: pronto
• CWE: CWE-200 (confirmado)
• CVSS: 5.0 (NVD)
• EPSS: 0.01093
• KEV: não
• Atividades: muito baixo
• Sector: Homeoffice

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-5955
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-5955
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-5955/