CVE-2013-2086: Infoleak
Published Mar 14, 2014
·Updated
The configuration loader in ownCloud 5.0.x before 5.0.6 allows remote attackers to obtain CSRF tokens and other sensitive information by reading an unspecified JavaScript file.
Affected Software
12 affected components
ownCloud ownCloud=5.0.0
ownCloud ownCloud=5.0.1
ownCloud ownCloud=5.0.2
ownCloud ownCloud=5.0.3
ownCloud ownCloud=5.0.4
ownCloud ownCloud=5.0.5
ownCloud ownCloud Server=5.0.0
ownCloud ownCloud Server=5.0.1
ownCloud ownCloud Server=5.0.2
ownCloud ownCloud Server=5.0.3
ownCloud ownCloud Server=5.0.4
ownCloud ownCloud Server=5.0.5
Remediation
Event History
Mar 14, 2014
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-2086?
CVE-2013-2086 has been classified as a medium severity vulnerability due to the potential exposure of sensitive information.
2
How do I fix CVE-2013-2086?
To fix CVE-2013-2086, upgrade your ownCloud installation to version 5.0.6 or later.
3
What does CVE-2013-2086 affect?
CVE-2013-2086 affects ownCloud versions 5.0.0 through 5.0.5.
4
What kind of attack is possible with CVE-2013-2086?
CVE-2013-2086 allows remote attackers to access CSRF tokens and other sensitive information.
5
Is there a patch available for CVE-2013-2086?
Yes, a patch is available by updating to ownCloud version 5.0.6, which addresses CVE-2013-2086.