CVE-2015-4716: Path Traversal

Q: What is the severity of CVE-2015-4716?

CVE-2015-4716 is classified as a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary code.

Q: How do I fix CVE-2015-4716?

To fix CVE-2015-4716, upgrade to ownCloud Server version 7.0.6, 8.0.4, or later.

Q: What versions of ownCloud are affected by CVE-2015-4716?

CVE-2015-4716 affects ownCloud Server versions prior to 7.0.6 and 8.0.x before 8.0.4.

Q: Can CVE-2015-4716 lead to data loss?

Yes, CVE-2015-4716 can potentially lead to data loss as it allows remote code execution, which may lead to unauthorized access and manipulation of files.

Q: Is CVE-2015-4716 specific to any operating system?

Yes, CVE-2015-4716 specifically affects ownCloud Server installations running on Windows.

Published Oct 21, 2015

Updated

Directory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8.0.x before 8.0.4, when running on Windows, allows remote attackers to reinstall the application or execute arbitrary code via unspecified vectors.

Affected Software

10 affected components

All of the following

Any of the following

ownCloud ownCloud<=7.0.5

ownCloud ownCloud Server=8.0.0

ownCloud ownCloud Server=8.0.2

ownCloud ownCloud Server=8.0.3

Microsoft Windows

ownCloud ownCloud<=7.0.5

ownCloud ownCloud=8.0.0

ownCloud ownCloud=8.0.2

ownCloud ownCloud=8.0.3

Microsoft Windows

Event History

Oct 21, 2015

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Data Sourced

via NVD·06:59 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2015-4716?

CVE-2015-4716 is classified as a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary code.

How do I fix CVE-2015-4716?

To fix CVE-2015-4716, upgrade to ownCloud Server version 7.0.6, 8.0.4, or later.

What versions of ownCloud are affected by CVE-2015-4716?