NVD

Id
27953  
Name
CVE-2015-7298  
Description
ownCloud Desktop Client before 2.0.1, when compiled with a Qt release after 5.3.x, does not call QNetworkReply::ignoreSslErrors with the list of errors to be ignored, which makes it easier for remote attackers to conduct man-in-the-middle (MITM) attacks by leveraging a server using a self-signed certificate. NOTE: this vulnerability exists because of a partial CVE-2015-4456 regression.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-10-26  
Modified Date
2015-10-28  
Seq
2015-7298  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
147026 27953 CVE-2015-7298 https://owncloud.org/security/advisory/?id=oc-sa-2015-016  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10295 JVNDB-2015-005615 ownCloud Desktop Client における中間者攻撃を実行される脆弱性 ownCloud Desktop Client は、5.3.x より上のバージョンの Qt でコンパイルされている場合、無視するエラーを列挙した QNetworkReply::ignoreSslErrors を呼び出さないため、中間者攻撃 (man-in-the-middle attack) を実行される脆弱性が存在します。 CVE-2015-7298 84523 CVE-2015-7298 27953 5.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005615.html 2015-09-21 2015-10-29 View