CVE-2014-3963: Medium severity ownCloud ownCloud vulnerability
Published Jun 4, 2014
·Updated
ownCloud Server before 6.0.1 does not properly check permissions, which allows remote authenticated users to access arbitrary preview pictures via unspecified vectors.
Affected Software
1 affected component
ownCloud ownCloud<=6.0.0
Remediation
Event History
Jun 4, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-3963?
CVE-2014-3963 is considered a medium severity vulnerability due to improper permission checks in ownCloud Server.
2
How do I fix CVE-2014-3963?
To fix CVE-2014-3963, upgrade ownCloud Server to version 6.0.1 or later.
3
Who is affected by CVE-2014-3963?
CVE-2014-3963 affects all versions of ownCloud Server before 6.0.1.
4
What type of access does CVE-2014-3963 allow?
CVE-2014-3963 allows remote authenticated users to access arbitrary preview pictures without proper permissions.
5
When was CVE-2014-3963 announced?
CVE-2014-3963 was publicly disclosed in 2014.