CVE-2016-1500

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2016-1500

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-1500.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2016-1500

Downstream

MGASA-2016-0040

Published

2016-01-08T21:59:08.890Z

Modified

2026-07-08T05:47:56.091762873Z

Severity

3.1 (Low) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

[none]

Details

ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2, when the "file_versions" application is enabled, does not properly check the return value of getOwner, which allows remote authenticated users to read the files with names starting with ".v" and belonging to a sharing user by leveraging an incoming share.

Database specific

{
    "unresolved_ranges": [
        {
            "source": "CPE_STRING",
            "vendor_product": "owncloud:owncloud",
            "extracted_events": [
                {
                    "introduced": "8.2.0"
                },
                {
                    "last_affected": "8.2.0"
                }
            ],
            "cpes": [
                "cpe:2.3:a:owncloud:owncloud:8.2.0:*:*:*:*:*:*:*"
            ]
        }
    ]
}

References

https://owncloud.org/security/advisory/?id=oc-sa-2016-003

Affected packages

Git / github.com/owncloud/core

Affected ranges

Type

GIT

Repo

https://github.com/owncloud/core

Events

Introduced

Last affected

119cd08c93b4d16e5b51e5a6f1008536a1892f8b

Introduced

8ee2009de36e01a9866404f07722892f84c16e3e

Last affected

aca9fce93f5b586e52d4416658105ef2657d9dcb

Database specific

{
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud:8.2.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud:8.2.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud_server:8.0.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud_server:8.0.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud_server:8.0.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud_server:8.0.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud_server:8.0.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud_server:8.0.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud_server:8.0.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud_server:8.0.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud_server:8.1.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud_server:8.1.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud_server:8.1.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud_server:8.1.4:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.11"
        },
        {
            "introduced": "8.2.0"
        },
        {
            "last_affected": "8.2.0"
        },
        {
            "introduced": "8.2.1"
        },
        {
            "last_affected": "8.2.1"
        },
        {
            "introduced": "8.0.0"
        },
        {
            "last_affected": "8.0.0"
        },
        {
            "introduced": "8.0.2"
        },
        {
            "last_affected": "8.0.2"
        },
        {
            "introduced": "8.0.3"
        },
        {
            "last_affected": "8.0.3"
        },
        {
            "introduced": "8.0.4"
        },
        {
            "last_affected": "8.0.4"
        },
        {
            "introduced": "8.0.5"
        },
        {
            "last_affected": "8.0.5"
        },
        {
            "introduced": "8.0.6"
        },
        {
            "last_affected": "8.0.6"
        },
        {
            "introduced": "8.0.8"
        },
        {
            "last_affected": "8.0.8"
        },
        {
            "introduced": "8.0.9"
        },
        {
            "last_affected": "8.0.9"
        },
        {
            "introduced": "8.1.0"
        },
        {
            "last_affected": "8.1.0"
        },
        {
            "introduced": "8.1.1"
        },
        {
            "last_affected": "8.1.1"
        },
        {
            "introduced": "8.1.3"
        },
        {
            "last_affected": "8.1.3"
        },
        {
            "introduced": "8.1.4"
        },
        {
            "last_affected": "8.1.4"
        }
    ]
}

Affected versions

8.*

8.0.0

8.0.2

8.0.3

8.0.4

8.0.5

8.0.6

8.0.8

8.0.9

8.1.0

8.1.1

8.1.3

8.1.4

8.2.0

8.2.1

v1.*

v1.0.0beta1

v3.*

v3.0

v4.*

v4.0.0

v4.0.0RC

v4.0.0RC2

v4.0.0beta

v4.0.1

v4.0.4

v4.0.5

v4.0.6

v4.5.0

v4.5.0RC1

v4.5.0RC2

v4.5.0RC3

v4.5.0beta3

v4.5.0beta4

v5.*

v5.0.0

v5.0.0RC1

v5.0.0RC2

v5.0.0RC3

v5.0.0alpha1

v5.0.0beta1

v5.0.0beta2

v6.*

v6.0.0RC1

v6.0.0RC2

v6.0.0alpha2

v6.0.0beta2

v6.0.0beta3

v6.0.0beta4

v6.0.0beta5

v7.*

v7.0.0

v7.0.0RC1

v7.0.0RC2

v7.0.0RC3

v7.0.0alpha2

v7.0.0beta1

v7.0.1

v7.0.10

v7.0.11

v7.0.11RC1

v7.0.11RC2

v7.0.1RC1

v7.0.2

v7.0.2RC1

v7.0.3

v7.0.3RC1

v7.0.3RC2

v7.0.3RC3

v7.0.3alpha1

v7.0.4

v7.0.4RC1

v7.0.4RC2

v7.0.5

v7.0.6

v7.0.6RC1

v7.0.6RC2

v7.0.7

v7.0.7RC1

v7.0.7beta

v7.0.8

v7.0.8RC1

v7.0.8beta1

v7.0.9

v7.0.9RC1

v8.*

v8.0.0

v8.0.0RC1

v8.0.0RC2

v8.0.0alpha1

v8.0.0alpha2

v8.0.0beta1

v8.0.0beta2

v8.1.0

v8.1.0alpha1

v8.1.0alpha2

v8.1.0beta1

v8.1.0beta2

v8.1.1

v8.1.1RC1

v8.1.1beta

v8.1.1beta1

v8.1.2

v8.1.2RC1

v8.1.3

v8.1.4

v8.1.4RC1

v8.1.4RC2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-1500.json"