CVE-2014-3835 — MEDIUM (5.5)

Q: How severe is CVE-2014-3835?

CVE-2014-3835 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2014-3835?

Check the references section above for vendor advisories and patch information. Affected products include: Owncloud Owncloud Server, Owncloud Owncloud.

Vulnerability Description

ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not check permissions to the files_external application, which allows remote authenticated users to add external storage via unspecified vectors.

CVSS Score

5.5

MEDIUM

AV:N/AC:L/Au:S/C:N/I:P/A:P

Confidentiality

NONE

Integrity

PARTIAL

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Owncloud	Owncloud Server	6.0.0
Owncloud	Owncloud	<= 5.0.15

Related Weaknesses (CWE)

CWE-264

References

http://owncloud.org/about/security/advisories/oc-sa-2014-012/Vendor Advisory
http://owncloud.org/about/security/advisories/oc-sa-2014-012/Vendor Advisory

FAQ

What is CVE-2014-3835?

CVE-2014-3835 is a vulnerability with a CVSS score of 5.5 (MEDIUM). ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not check permissions to the files_external application, which allows remote authenticated users to add external storage via unspecified vecto...

How severe is CVE-2014-3835?

CVE-2014-3835 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-3835?

Check the references section above for vendor advisories and patch information. Affected products include: Owncloud Owncloud Server, Owncloud Owncloud.