CVE-2014-3834: High severity ownCloud ownCloud vulnerability
Published Jun 4, 2014
·Updated
ownCloud Server before 6.0.3 does not properly check permissions, which allows remote authenticated users to (1) access the contacts of other users via the address book or (2) rename files via unspecified vectors.
Affected Software
5 affected components
ownCloud ownCloud<=6.0.2
ownCloud ownCloud=6.0.0
ownCloud ownCloud=6.0.1
ownCloud ownCloud Server=6.0.0
ownCloud ownCloud Server=6.0.1
Event History
Jun 4, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-3834?
CVE-2014-3834 is classified as a medium-severity vulnerability due to its impact on user data confidentiality.
2
What versions of ownCloud are affected by CVE-2014-3834?
CVE-2014-3834 affects ownCloud versions prior to 6.0.3.
3
How do I fix CVE-2014-3834?
To fix CVE-2014-3834, upgrade ownCloud to version 6.0.3 or later.
4
What type of vulnerability is CVE-2014-3834?
CVE-2014-3834 is a permission-related vulnerability that allows unauthorized access to user contacts and file renaming.
5
Can remote authenticated users exploit CVE-2014-3834?
Yes, remote authenticated users can exploit CVE-2014-3834 to access other users' contacts and rename files.