NetSight
medium4.3

CVE-2014-5341

The SFTP external storage driver (files_external) in ownCloud Server before 6.0.5 validates the RSA Host key after login, which allows remote attackers to obta…

Impact

The SFTP external storage driver (files_external) in ownCloud Server before 6.0.5 validates the RSA Host key after login, which allows remote attackers to obtain sensitive information by sniffing the network.

Affected products

VendorProductAffected versions
OwncloudOwncloud
through 6.0.4

Weakness classification

References