CVE-2014-9047: Medium severity owncloud vulnerability
Published Feb 4, 2015
·Updated
Multiple unspecified vulnerabilities in the preview system in ownCloud 6.x before 6.0.6 and 7.x before 7.0.3 allow remote attackers to read arbitrary files via unknown vectors.
Affected Software
55 affected components
ownCloud ownCloud<=5.0.17
ownCloud ownCloud=5.0.0
ownCloud ownCloud=5.0.1
ownCloud ownCloud=5.0.2
ownCloud ownCloud=5.0.3
ownCloud ownCloud=5.0.4
ownCloud ownCloud=5.0.5
ownCloud ownCloud=5.0.6
ownCloud ownCloud=5.0.7
ownCloud ownCloud=5.0.8
ownCloud ownCloud=5.0.9
ownCloud ownCloud=5.0.10
ownCloud ownCloud=5.0.11
ownCloud ownCloud=5.0.12
ownCloud ownCloud=5.0.13
ownCloud ownCloud=5.0.14
ownCloud ownCloud=5.0.14-a
ownCloud ownCloud=5.0.15
ownCloud ownCloud=5.0.16
ownCloud ownCloud=6.0.0
ownCloud ownCloud=6.0.1
ownCloud ownCloud=6.0.2
ownCloud ownCloud=6.0.3
ownCloud ownCloud=6.0.4
ownCloud ownCloud=6.0.5
ownCloud ownCloud=7.0.0
ownCloud ownCloud=7.0.1
ownCloud ownCloud=7.0.2
ownCloud ownCloud Server=5.0.0
ownCloud ownCloud Server=5.0.1
ownCloud ownCloud Server=5.0.2
ownCloud ownCloud Server=5.0.3
ownCloud ownCloud Server=5.0.4
ownCloud ownCloud Server=5.0.5
ownCloud ownCloud Server=5.0.6
ownCloud ownCloud Server=5.0.7
ownCloud ownCloud Server=5.0.8
ownCloud ownCloud Server=5.0.9
ownCloud ownCloud Server=5.0.10
ownCloud ownCloud Server=5.0.11
ownCloud ownCloud Server=5.0.12
ownCloud ownCloud Server=5.0.13
ownCloud ownCloud Server=5.0.14
ownCloud ownCloud Server=5.0.14-a
ownCloud ownCloud Server=5.0.15
ownCloud ownCloud Server=5.0.16
ownCloud ownCloud Server=6.0.0
ownCloud ownCloud Server=6.0.1
ownCloud ownCloud Server=6.0.2
ownCloud ownCloud Server=6.0.3
ownCloud ownCloud Server=6.0.4
ownCloud ownCloud Server=6.0.5
ownCloud ownCloud Server=7.0.0
ownCloud ownCloud Server=7.0.1
ownCloud ownCloud Server=7.0.2
Event History
Feb 4, 2015
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:59 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-9047?
CVE-2014-9047 is considered a high-severity vulnerability due to its potential exploitation by remote attackers to access arbitrary files.
2
How do I fix CVE-2014-9047?
To fix CVE-2014-9047, update your ownCloud installation to versions 6.0.6 or 7.0.3 or later.
3
What versions are affected by CVE-2014-9047?
CVE-2014-9047 affects ownCloud versions prior to 6.0.6 and 7.0.3.
4
Can CVE-2014-9047 be exploited remotely?
Yes, CVE-2014-9047 allows remote attackers to exploit the vulnerability due to the improper handling of file previews.
5
What is the impact of CVE-2014-9047 on my files?
The impact of CVE-2014-9047 includes the risk of unauthorized access to confidential files stored on ownCloud servers.