1. Home
  2. CVE Database
  3. CVE-2014-9044
MEDIUM · 5.0

CVE-2014-9044

Asset Pipeline in ownCloud 7.x before 7.0.3 uses an MD5 hash of the absolute file paths of the original CSS and JS files as the name of the concatenated file, which allows remote attackers to obtain s...

Vulnerability Description

Asset Pipeline in ownCloud 7.x before 7.0.3 uses an MD5 hash of the absolute file paths of the original CSS and JS files as the name of the concatenated file, which allows remote attackers to obtain sensitive information via a brute force attack.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:N
Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
OwncloudOwncloud Server7.0.0

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2014-9044?

CVE-2014-9044 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Asset Pipeline in ownCloud 7.x before 7.0.3 uses an MD5 hash of the absolute file paths of the original CSS and JS files as the name of the concatenated file, which allows remote attackers to obtain s...

How severe is CVE-2014-9044?

CVE-2014-9044 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-9044?

Check the references section above for vendor advisories and patch information. Affected products include: Owncloud Owncloud Server.