NetSight
low2.1

CVE-2013-2047

The login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting for the password parameter, which makes it easier for physica…

Impact

The login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting for the password parameter, which makes it easier for physically proximate attackers to guess the password.

Affected products

VendorProductAffected versions
OwncloudOwncloud
through 5.0.5
OwncloudOwncloud Server
Versions 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4

Weakness classification

References