NVD

Id
25886  
Name
CVE-2015-4456  
Description
ownCloud Desktop Client before 1.8.2 does not call QNetworkReply::ignoreSslErrors with the list of errors to be ignored, which allows man-in-the-middle attackers to bypass the user"s certificate distrust decision and obtain sensitive information by leveraging a self-signed certificate and a connection to a server using its own self-signed certificate.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-10-26  
Modified Date
2016-12-23  
Seq
2015-4456  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
136454 25886 CVE-2015-4456 DSA-3363  View
136455 25886 CVE-2015-4456 75354  View
136456 25886 CVE-2015-4456 https://github.com/owncloud/client/issues/3283  View
136457 25886 CVE-2015-4456 https://owncloud.org/security/advisory/?id=oc-sa-2015-009  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10293 JVNDB-2015-005613 ownCloud Desktop Client におけるユーザの証明書に対する不信決定を回避される脆弱性 ownCloud Server は、無視するエラーを列挙した QNetworkReply::ignoreSslErrors を呼び出さないため、ユーザの証明書に対する不信決定を回避され、重要な情報を取得される脆弱性が存在します。 CVE-2015-4456 81681 CVE-2015-4456 25886 2.6 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005613.html 2015-06-08 2015-10-29 View