CVE-2016-1500

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2016-1500
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-1500.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-1500
Published
2016-01-08T21:59:08Z
Modified
2024-09-03T02:35:25.358904Z
Severity
  • 3.1 (Low) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2, when the "file_versions" application is enabled, does not properly check the return value of getOwner, which allows remote authenticated users to read the files with names starting with ".v" and belonging to a sharing user by leveraging an incoming share.

References

Affected packages

Git / github.com/owncloud/core

Affected ranges

Type
GIT
Repo
https://github.com/owncloud/core
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
015323c1cb239ab242ff43183fd2edb8e3103025
Last affected
06ec916b1128b9a1ec79751bdd78cc4a8c64ace8
Last affected
07546d0e8ce2a2a5d3611718495c57853ce101ff
Last affected
258496c951d5a25662eae780f360c9a1e2171b44
Last affected
3bd5f5eb4cd43fda85f97d1caa216abb213ffaf0
Last affected
3f2069bd66669414d529cbdf2208635f27c85288
Last affected
5fcab24e592c5f0f35d3293449dbd2f15a40f5f8
Last affected
811b7dff9f152b3b58e52270d2d7a85cb18dd14e
Last affected
8db687a1cddd13c2a6fb6b16038d20275bd31e17
Last affected
8ee2009de36e01a9866404f07722892f84c16e3e
Last affected
8f71705c2ec73d396ff8178f088661c3a20988b0
Last affected
aca9fce93f5b586e52d4416658105ef2657d9dcb
Last affected
ca66a705ec59cce1ac60c2fb92ec543e296c23f9
Last affected
df2808eec840c033b952e001ee8a063a93fae417

Affected versions

v1.*

v1.0.0beta1
v1.0RC1
v1.1

v2.*

v2.0beta3

v3.*

v3.0
v3.0RC1
v3.0alpha1

v4.*

v4.0.0
v4.0.0RC
v4.0.0RC2
v4.0.0beta
v4.0.1
v4.0.3
v4.0.4
v4.0.5
v4.0.6
v4.5.0
v4.5.0RC1
v4.5.0RC2
v4.5.0RC3
v4.5.0beta1
v4.5.0beta2
v4.5.0beta3
v4.5.0beta4

v5.*

v5.0.0
v5.0.0RC1
v5.0.0RC2
v5.0.0RC3
v5.0.0alpha1
v5.0.0beta1
v5.0.0beta2

v6.*

v6.0.0RC1
v6.0.0RC2
v6.0.0alpha2
v6.0.0beta2
v6.0.0beta3
v6.0.0beta4
v6.0.0beta5

v7.*

v7.0.0alpha2
v7.0.0beta1

v8.*

v8.0.0
v8.0.0RC1
v8.0.0RC2
v8.0.0alpha1
v8.0.0alpha2
v8.0.0beta1
v8.0.0beta2
v8.0.1
v8.0.1RC1
v8.0.2
v8.0.3
v8.0.3RC1
v8.0.3RC2
v8.0.3RC3
v8.0.3RC4
v8.0.4
v8.0.4RC1
v8.0.4RC2
v8.0.5
v8.0.5RC1
v8.0.5beta
v8.0.6
v8.0.6RC1
v8.0.6beta1
v8.0.7
v8.0.7RC1
v8.0.8
v8.1.0
v8.1.0alpha1
v8.1.0alpha2
v8.1.0beta1
v8.1.0beta2
v8.1.1
v8.1.1RC1
v8.1.1beta
v8.1.1beta1
v8.1.2
v8.1.2RC1
v8.1.3
v8.1RC2
v8.2.0
v8.2RC1
v8.2RC2
v8.2RC3
v8.2beta1