CVE-2017-5866: Infoleak
The autocomplete feature in the E-Mail share dialog in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to obtain sensitive information via unspecified vectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability CVE-2017-5866?
CVE-2017-5866 is a vulnerability in ownCloud Server's email sharing autocomplete feature that allows remote authenticated users to access sensitive information.
What versions of ownCloud are affected by CVE-2017-5866?
CVE-2017-5866 affects ownCloud Server versions prior to 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3.
How do I fix CVE-2017-5866?
To fix CVE-2017-5866, upgrade your ownCloud Server to the latest version that is not affected by this vulnerability.
What impacts can CVE-2017-5866 have on my organization?
CVE-2017-5866 can lead to unauthorized exposure of sensitive information to remote authenticated users in your organization.
Is my data safe if I am using a vulnerable version of ownCloud related to CVE-2017-5866?
If you are using a vulnerable version of ownCloud related to CVE-2017-5866, your data may not be safe due to potential unauthorized access by authenticated users.