CVE-2012-4392: High severity owncloud vulnerability
Published Sep 5, 2012
·Updated
index.php in ownCloud 4.0.7 does not properly validate the octoken cookie, which allows remote attackers to bypass authentication via a crafted octoken cookie value.
Affected Software
2 affected components
ownCloud ownCloud=4.0.7
ownCloud ownCloud Server=4.0.7
Remediation
Event History
Sep 5, 2012
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Data Sourced
via NVD·11:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2012-4392?
CVE-2012-4392 is considered a high severity vulnerability due to its potential for unauthorized access.
2
How do I fix CVE-2012-4392?
To fix CVE-2012-4392, you should upgrade to a version of ownCloud that includes the security patches for this vulnerability.
3
What type of attack does CVE-2012-4392 involve?
CVE-2012-4392 involves a remote authentication bypass attack through a crafted oc_token cookie.
4
Which software version is affected by CVE-2012-4392?
CVE-2012-4392 affects ownCloud version 4.0.7.
5
Can CVE-2012-4392 lead to data breaches?
Yes, CVE-2012-4392 can potentially lead to data breaches by allowing attackers to bypass authentication.