medium5.0
CVE-2014-2049
The default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows remote attackers to access user files via unspecified vectors.
Impact
The default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows remote attackers to access user files via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Owncloud | Owncloud Server | Versions 6.0.0, 6.0.1, 3.0.0, 3.0.1, 3.0.2, 3.0.3 |
| Owncloud | Owncloud | through 5.0.14 |