medium6.8
CVE-2014-2047
Session fixation vulnerability in ownCloud before 6.0.2, when PHP is configured to accept session parameters through a GET request, allows remote attackers to …
Impact
Session fixation vulnerability in ownCloud before 6.0.2, when PHP is configured to accept session parameters through a GET request, allows remote attackers to hijack web sessions via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Owncloud | Owncloud | through 6.0.1 |
| Owncloud | Owncloud Server | Version 6.0.0 |