Description

The user_openid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID implementation.

Remediation

References

CVE-2014-2048

Related Vulnerabilities

Java Unspesificed Vulnerability (CVE-2018-2941)

WordPress 4.0.x Cross-Site Scripting Vulnerability (4.0 - 4.0.8)

MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9276)

WordPress Plugin WP VR-360 Panorama and Virtual Tour Builder For WordPress Cross-Site Scripting (8.2.6)

Undertow Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') Vulnerability (CVE-2018-1067)

Severity

Critical

Classification

CVE-2014-2048 CWE-284 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities