CVE-2012-4392

Name of the Vulnerable Software and Affected Versions ownCloud version 4.0.7

Description The issue concerns improper validation of the oc token cookie in the index.php file, allowing remote attackers to bypass authentication by crafting a specific oc token cookie value.

Recommendations For ownCloud version 4.0.7, consider updating to a newer version that properly validates the oc token cookie to prevent authentication bypass. As a temporary workaround, restrict access to sensitive areas of the application to minimize the risk of exploitation.