Description

The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote authenticated users to obtain all valid session IDs via an unspecified API method.

Remediation

References

CVE-2014-9049

Related Vulnerabilities

Squid NULL Pointer Dereference Vulnerability (CVE-2018-1172)

SharePoint CVE-2022-38009 Vulnerability (CVE-2022-38009)

WordPress Plugin WordPoints Multiple Vulnerabilities (1.10.2)

WebLogic CVE-2019-2856 Vulnerability (CVE-2019-2856)

WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud Security Bypass (3.1.9)

Severity

Medium

Classification

CVE-2014-9049 CWE-200

Tags

Missing Update Known Vulnerabilities