CVE-2014-9046: Infoleak
Published Feb 4, 2015
·Updated
The OCUtil::getUrlContent function in ownCloud Server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to read arbitrary files via a file:// protocol.
Affected Software
55 affected components
ownCloud ownCloud<=5.0.17
ownCloud ownCloud=5.0.0
ownCloud ownCloud=5.0.1
ownCloud ownCloud=5.0.2
ownCloud ownCloud=5.0.3
ownCloud ownCloud=5.0.4
ownCloud ownCloud=5.0.5
ownCloud ownCloud=5.0.6
ownCloud ownCloud=5.0.7
ownCloud ownCloud=5.0.8
ownCloud ownCloud=5.0.9
ownCloud ownCloud=5.0.10
ownCloud ownCloud=5.0.11
ownCloud ownCloud=5.0.12
ownCloud ownCloud=5.0.13
ownCloud ownCloud=5.0.14
ownCloud ownCloud=5.0.14-a
ownCloud ownCloud=5.0.15
ownCloud ownCloud=5.0.16
ownCloud ownCloud=6.0.0
ownCloud ownCloud=6.0.1
ownCloud ownCloud=6.0.2
ownCloud ownCloud=6.0.3
ownCloud ownCloud=6.0.4
ownCloud ownCloud=6.0.5
ownCloud ownCloud=7.0.0
ownCloud ownCloud=7.0.1
ownCloud ownCloud=7.0.2
ownCloud ownCloud Server=5.0.0
ownCloud ownCloud Server=5.0.1
ownCloud ownCloud Server=5.0.2
ownCloud ownCloud Server=5.0.3
ownCloud ownCloud Server=5.0.4
ownCloud ownCloud Server=5.0.5
ownCloud ownCloud Server=5.0.6
ownCloud ownCloud Server=5.0.7
ownCloud ownCloud Server=5.0.8
ownCloud ownCloud Server=5.0.9
ownCloud ownCloud Server=5.0.10
ownCloud ownCloud Server=5.0.11
ownCloud ownCloud Server=5.0.12
ownCloud ownCloud Server=5.0.13
ownCloud ownCloud Server=5.0.14
ownCloud ownCloud Server=5.0.14-a
ownCloud ownCloud Server=5.0.15
ownCloud ownCloud Server=5.0.16
ownCloud ownCloud Server=6.0.0
ownCloud ownCloud Server=6.0.1
ownCloud ownCloud Server=6.0.2
ownCloud ownCloud Server=6.0.3
ownCloud ownCloud Server=6.0.4
ownCloud ownCloud Server=6.0.5
ownCloud ownCloud Server=7.0.0
ownCloud ownCloud Server=7.0.1
ownCloud ownCloud Server=7.0.2
Event History
Feb 4, 2015
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-9046?
CVE-2014-9046 has a moderate severity rating, allowing remote attackers to read arbitrary files.
2
How do I fix CVE-2014-9046?
To fix CVE-2014-9046, upgrade to ownCloud Server version 5.0.18, 6.0.6, or 7.0.3 or later.
3
What versions are affected by CVE-2014-9046?
CVE-2014-9046 affects ownCloud Server versions prior to 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3.
4
Can CVE-2014-9046 lead to data exposure?
Yes, CVE-2014-9046 can lead to unauthorized file access and potential data exposure.
5
What is the vulnerability type of CVE-2014-9046?
CVE-2014-9046 is classified as a local file inclusion vulnerability.