Description

The installation routine in ownCloud Server before 4.0.14, 4.5.x before 4.5.9, and 5.0.x before 5.0.4 uses the time function to seed the generation of the PostgreSQL database user password, which makes it easier for remote attackers to guess the password via a brute force attack.

Remediation

References

CVE-2013-1941

Related Vulnerabilities

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-2092)

MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-5612)

MathJax Inefficient Regular Expression Complexity Vulnerability (CVE-2023-39663)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-0212)

OpenSSL Cryptographic Issues Vulnerability (CVE-2015-0204)

Severity

Medium

Classification

CVE-2013-1941

Tags

Missing Update Known Vulnerabilities