PT-2015-2573
CVE-2015-4716
·
تاريخ النشر
2015-10-18
·
تاريخ التحديث
2016-12-07
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
ownCloud Server versions 7.0.0 through 7.0.6
ownCloud Server versions 8.0.0 through 8.0.4
Description
The issue is related to a directory traversal vulnerability in the routing component of ownCloud Server. This vulnerability allows remote attackers to reinstall the application or execute arbitrary code via unspecified vectors when running on Windows. The vulnerability exists due to incorrect restriction of the path name to a directory with limited access.
Recommendations
For ownCloud Server versions 7.0.0 through 7.0.6, update to version 7.0.6 or later.
For ownCloud Server versions 8.0.0 through 8.0.4, update to version 8.0.4 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾