The login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting for the password parameter, which makes it easier for physically proximate attackers to guess the password.
References
Link | Resource |
---|---|
http://owncloud.org/about/security/advisories/oC-SA-2013-023/ | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2014-03-14 09:55
Updated : 2014-03-17 08:37
NVD link : CVE-2013-2047
Mitre link : CVE-2013-2047
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
owncloud
- owncloud