NVD

Id
46765  
Name
CVE-2012-5665  
Description
ownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 does not properly restrict access to settings.php, which allows remote attackers to edit app configurations of user_webdavauth and user_ldap by editing this file.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2013-01-02  
Modified Date
2013-01-03  
Seq
2012-5665  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
234280 46765 CVE-2012-5665 http://owncloud.org/changelog/  View
234281 46765 CVE-2012-5665 [oss-security] 20121221 CVE request: ownCloud  View
234282 46765 CVE-2012-5665 [oss-security] 20121221 Re: CVE request: ownCloud  View
234283 46765 CVE-2012-5665 57030  View
234284 46765 CVE-2012-5665 owncloud-settings-sec-bypass(80808)  View
234285 46765 CVE-2012-5665 https://github.com/owncloud/core/commit/c4ecbad  View
234286 46765 CVE-2012-5665 https://github.com/owncloud/core/commit/db7ca53  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30154 JVNDB-2012-005861 ownCloud における user_webdavauth および user_ldap の設定を変更される脆弱性 ownCloud は、settings.php へのアクセスを適切に制限しないため、user_webdavauth および user_ldap の設定を変更される脆弱性が存在します。 CVE-2012-5665 58903 CVE-2012-5665 46765 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005861.html 2012-12-18 2013-01-07 View