CVE-2020-36248: Medium severity owncloud vulnerability
Published Feb 19, 2021
·Updated
The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a backup archive, and consequently bypass the PIN lock feature by restoring from this archive.
Affected Software
2 affected components
ownCloud ownCloud Android<2.15
ownCloud Owncloud Client Android<2.15
Event History
Feb 19, 2021
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
DescriptionSeverity
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this security issue?
The vulnerability ID of this security issue is CVE-2020-36248.
2
What is the severity level of CVE-2020-36248?
CVE-2020-36248 has a severity level of medium.
3
How does the vulnerability in ownCloud for Android impact the security?
The vulnerability in ownCloud for Android allows attackers to bypass the PIN lock feature by restoring from a backup archive that includes a PIN preferences value.
4
Which version of ownCloud for Android is affected by this vulnerability?
The vulnerability affects ownCloud for Android versions before 2.15.
5
Is there a fix available for CVE-2020-36248?
Yes, a fix for CVE-2020-36248 is available. Please refer to the official security advisory for more information.