CVE-2014-3837: Medium severity ownCloud ownCloud vulnerability
Published Jun 4, 2014
·Updated
The document application in ownCloud Server before 6.0.3 uses sequential values for the fileid, which allows remote authenticated users to enumerate shared files via unspecified vectors.
Affected Software
5 affected components
ownCloud ownCloud<=6.0.2
ownCloud ownCloud=6.0.0
ownCloud ownCloud=6.0.1
ownCloud ownCloud Server=6.0.0
ownCloud ownCloud Server=6.0.1
Event History
Jun 4, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-3837?
CVE-2014-3837 is classified as having a medium severity due to the potential for file enumeration by authenticated users.
2
How do I fix CVE-2014-3837?
To fix CVE-2014-3837, upgrade your ownCloud Server to version 6.0.3 or later.
3
Who is affected by CVE-2014-3837?
CVE-2014-3837 affects users of ownCloud Server versions up to and including 6.0.2.
4
What does CVE-2014-3837 enable attackers to do?
CVE-2014-3837 allows remote authenticated users to enumerate shared files via predictable file IDs.
5
Is there a workaround for CVE-2014-3837?
There are no documented workarounds for CVE-2014-3837, so upgrading is the recommended mitigation.