Description

A logical error in ownCloud Server before 10.0.2 caused disclosure of valid share tokens for public calendars. Thus granting an attacker potentially access to publicly shared calendars without knowing the share token.

Remediation

References

CVE-2017-9339

Related Vulnerabilities

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-2196)

Magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-3719)

Moodle Other Vulnerability (CVE-2019-10189)

MySQL CVE-2017-3639 Vulnerability (CVE-2017-3639)

Magento Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-7854)

Severity

Medium

Classification

CVE-2017-9339 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities