VULNERABILITY INTELLIGENCE
CVE-2013-2047
CVSS score2.1 LOW
EPSS probability0.37%
CISA KEVNot currently listed
Published2014-03-14
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:P/A:N
Description
The login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting for the password parameter, which makes it easier for physically proximate attackers to guess the password.
Primary references
- secalert@redhat.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory