ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which might allow remote instance administrators to obtain sensitive credential and cookie information by reading authentication headers.
References
Link | Resource |
---|---|
https://owncloud.org/security/advisory/?id=oc-sa-2015-013 | Broken Link Vendor Advisory |
Configurations
Information
Published : 2015-10-29 13:59
Updated : 2021-09-10 07:12
NVD link : CVE-2015-5955
Mitre link : CVE-2015-5955
JSON object : View
CWE
CWE-522
Insufficiently Protected Credentials
Products Affected
owncloud
- owncloud