CVE-2015-5955

ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which might allow remote instance administrators to obtain sensitive credential and cookie information by reading authentication headers.
References
Link Resource
https://owncloud.org/security/advisory/?id=oc-sa-2015-013 Broken Link Vendor Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:iphone_os:*:*

Information

Published : 2015-10-29 13:59

Updated : 2021-09-10 07:12


NVD link : CVE-2015-5955

Mitre link : CVE-2015-5955


JSON object : View

CWE
CWE-522

Insufficiently Protected Credentials

Advertisement

dedicated server usa

Products Affected

owncloud

  • owncloud