medium5.0
CVE-2012-4752
appconfig.php in ownCloud before 4.0.6 does not properly restrict access, which allows remote authenticated users to edit app configurations via unspecified ve…
Impact
appconfig.php in ownCloud before 4.0.6 does not properly restrict access, which allows remote authenticated users to edit app configurations via unspecified vectors. NOTE: this can be leveraged by unauthenticated remote attackers using CVE-2012-4393.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Owncloud | Owncloud | through 4.0.5 |
| Owncloud | Owncloud Server | Versions 3.0.0, 3.0.1, 3.0.2, 3.0.3, 4.0.0, 4.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://owncloud.org/changelog/
- http://www.openwall.com/lists/oss-security/2012/08/11/1
- http://www.openwall.com/lists/oss-security/2012/09/02/2
- https://github.com/owncloud/core/commit/9605e1926c6081e88326bf78a02c1d1b83126c4f
- http://owncloud.org/changelog/
- http://www.openwall.com/lists/oss-security/2012/08/11/1
- http://www.openwall.com/lists/oss-security/2012/09/02/2
- https://github.com/owncloud/core/commit/9605e1926c6081e88326bf78a02c1d1b83126c4f