CVE-2014-9045

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 5.0.18 ownCloud Server versions 6.x prior to 6.0.6

Description The issue allows remote attackers to bypass intended authentication requirements. This is achieved by crafting a password that exploits the FTP backend in the user external component of ownCloud Server.

Recommendations For ownCloud Server versions prior to 5.0.18, update to version 5.0.18 or later. For ownCloud Server versions 6.x prior to 6.0.6, update to version 6.0.6 or later.