This host is installed with ownCloud and is prone to session fixation vulnerability.

Successful exploitation will allow remote attackers to steal the authenticated sessions and gain unauthorized access. Impact Level: Application

Upgrade to ownCloud version 6.0.2 or later, For updates refer to http://owncloud.org

The flaw exists due to the application which while establishing a new session, does not invalidate an existing session identifier and assign a new one.

ownCloud Server 6.x before version 6.0.2

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://owncloud.org/about/security/advisories/oC-SA-2014-001
• http://www.osvdb.com/104480

---

Updated on 2015-03-25