Description

The installation routine in ownCloud Server before 4.0.14, 4.5.x before 4.5.9, and 5.0.x before 5.0.4 uses the time function to seed the generation of the PostgreSQL database user password, which makes it easier for remote attackers to guess the password via a brute force attack.

Remediation

References

CVE-2013-1941

Related Vulnerabilities

Apache version older than 1.3.27

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-33938)

Opencart Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-1610)

PHP Out-of-bounds Read Vulnerability (CVE-2019-11050)

PHP Other Vulnerability (CVE-2005-3353)

Severity

Medium

Classification

CVE-2013-1941

Tags

Missing Update Known Vulnerabilities