CVE-2012-4752: Medium severity owncloud vulnerability
Published Sep 5, 2012
·Updated
appconfig.php in ownCloud before 4.0.6 does not properly restrict access, which allows remote authenticated users to edit app configurations via unspecified vectors. NOTE: this can be leveraged by unauthenticated remote attackers using CVE-2012-4393.
Affected Software
19 affected components
ownCloud ownCloud<=4.0.5
ownCloud ownCloud=3.0.0
ownCloud ownCloud=3.0.1
ownCloud ownCloud=3.0.2
ownCloud ownCloud=3.0.3
ownCloud ownCloud=4.0.0
ownCloud ownCloud=4.0.1
ownCloud ownCloud=4.0.2
ownCloud ownCloud=4.0.3
ownCloud ownCloud=4.0.4
ownCloud ownCloud Server=3.0.0
ownCloud ownCloud Server=3.0.1
ownCloud ownCloud Server=3.0.2
ownCloud ownCloud Server=3.0.3
ownCloud ownCloud Server=4.0.0
ownCloud ownCloud Server=4.0.1
ownCloud ownCloud Server=4.0.2
ownCloud ownCloud Server=4.0.3
ownCloud ownCloud Server=4.0.4
Event History
Sep 5, 2012
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Data Sourced
via NVD·11:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2012-4752?
CVE-2012-4752 is classified as a medium severity vulnerability due to unauthorized access to app configuration.
2
How do I fix CVE-2012-4752?
To fix CVE-2012-4752, upgrade ownCloud to version 4.0.6 or later.
3
Who is affected by CVE-2012-4752?
CVE-2012-4752 affects ownCloud versions earlier than 4.0.6 and specific 3.x versions.
4
Can CVE-2012-4752 be exploited by unauthenticated users?
Yes, CVE-2012-4752 can potentially be exploited by unauthenticated users leveraging CVE-2012-4393.
5
What are the implications of CVE-2012-4752?
The implications of CVE-2012-4752 include unauthorized editing of app configurations, potentially compromising the integrity of the system.