CVE-2016-1501: Infoleak
Published Jan 8, 2016
·Updated
ownCloud Server before 8.0.9 and 8.1.x before 8.1.4 allow remote authenticated users to obtain sensitive information via unspecified vectors, which reveals the installation path in the resulting exception messages.
Affected Software
7 affected components
ownCloud ownCloud<=8.0.8
ownCloud ownCloud=8.1.0
ownCloud ownCloud=8.1.1
ownCloud ownCloud=8.1.3
ownCloud ownCloud Server=8.1.0
ownCloud ownCloud Server=8.1.1
ownCloud ownCloud Server=8.1.3
Event History
Jan 8, 2016
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-1501?
CVE-2016-1501 has a medium severity rating as it allows remote authenticated users to obtain sensitive information.
2
How do I fix CVE-2016-1501?
To fix CVE-2016-1501, upgrade ownCloud Server to version 8.0.9 or 8.1.4 or above.
3
What are the affected versions in CVE-2016-1501?
CVE-2016-1501 affects ownCloud Server versions before 8.0.9 and 8.1.x before 8.1.4.
4
What type of vulnerability is CVE-2016-1501?
CVE-2016-1501 is a security vulnerability that exposes sensitive information through exception messages.
5
Can unprivileged users exploit CVE-2016-1501?
CVE-2016-1501 requires a remote authenticated user to exploit the vulnerability.