NVD

Id
46532  
Name
CVE-2012-5336  
Description
lib/base.php in ownCloud before 4.0.8 does not properly validate the user_id session variable, which allows remote authenticated users to read arbitrary files via vectors related to WebDAV.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-06-04  
Modified Date
2014-06-04  
Seq
2012-5336  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
233141 46532 CVE-2012-5336 http://owncloud.org/about/security/advisories/CVE-2012-5336/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30523 JVNDB-2012-006231 ownCloud の lib/base.php における任意のファイルを読まれる脆弱性 ownCloud の lib/base.php は、user_id のセッション変数を適切に検証しないため、任意のファイルを読まれる脆弱性が存在します。 CVE-2012-5336 58574 CVE-2012-5336 46532 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006231.html 2012-10-09 2014-06-05 View