Description

ownCloud Server before 6.0.3 does not properly check permissions, which allows remote authenticated users to (1) access the contacts of other users via the address book or (2) rename files via unspecified vectors.

Remediation

References

CVE-2014-3834

Related Vulnerabilities

PrestaShop Improper Authentication Vulnerability (CVE-2020-15079)

Ruby Other Vulnerability (CVE-2014-8080)

WordPress Plugin Asgaros Forum Cross-Site Scripting (1.15.13)

Apache Tomcat Missing Release of Resource after Effective Lifetime Vulnerability (CVE-2021-42340)

WebLogic CVE-2020-14883 Vulnerability (CVE-2020-14883)

Severity

High

Classification

CVE-2014-3834 CWE-264

Tags

Missing Update Known Vulnerabilities