PT-2021-9145

CVE-2020-10254

·

Published

2021-02-19

·

Updated

2021-02-25

Description by

CVSS 3.1
5.9
Medium
MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 10.4
Description An issue was discovered in ownCloud where an attacker can bypass authentication on a password-protected image by displaying its preview.
Recommendations For ownCloud versions prior to 10.4, update to version 10.4 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-287: Improper Authentication
Related identifiers
CVE-2020-10254
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com