VULNERABILITY INTELLIGENCE

CVE-2014-3834

CVSS score7.5 HIGH
EPSS probability1.40%
CISA KEVNot currently listed
Published2014-06-04
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

ownCloud Server before 6.0.3 does not properly check permissions, which allows remote authenticated users to (1) access the contacts of other users via the address book or (2) rename files via unspecified vectors.

Primary references