CVE-2014-3834
First published: Wed Jun 04 2014(Updated: )
ownCloud Server before 6.0.3 does not properly check permissions, which allows remote authenticated users to (1) access the contacts of other users via the address book or (2) rename files via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ownCloud | <=6.0.2 | |
| ownCloud | =6.0.0 | |
| ownCloud | =6.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-3834?
CVE-2014-3834 is classified as a medium-severity vulnerability due to its impact on user data confidentiality.
What versions of ownCloud are affected by CVE-2014-3834?
CVE-2014-3834 affects ownCloud versions prior to 6.0.3.
How do I fix CVE-2014-3834?
To fix CVE-2014-3834, upgrade ownCloud to version 6.0.3 or later.
What type of vulnerability is CVE-2014-3834?
CVE-2014-3834 is a permission-related vulnerability that allows unauthorized access to user contacts and file renaming.
Can remote authenticated users exploit CVE-2014-3834?
Yes, remote authenticated users can exploit CVE-2014-3834 to access other users' contacts and rename files.
- agent/type
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/owncloud
- canonical/owncloud
- version/owncloud/6.0.2
- version/owncloud/6.0.0
- version/owncloud/6.0.1