CVE-2017-5865
- Source
- https://cve.org/CVERecord?id=CVE-2017-5865
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5865.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2017-5865
- Published
- 2017-03-03T15:59:01Z
- Modified
- 2026-10-24T10:30:29Z
- Severity
-
- 3.7 (Low) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 sends different error messages depending on whether the username is valid, which allows remote attackers to enumerate user names via a large number of password reset attempts.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "last_affected": "8.1.10" } ], "source": "CPE_RANGE" } ], "vendor_product": "owncloud:owncloud" }, { "cpes": [ "cpe:2.3:a:owncloud:owncloud:8.2.2:*:*:*:*:*:*:*", "cpe:2.3:a:owncloud:owncloud:8.2.3:*:*:*:*:*:*:*", "cpe:2.3:a:owncloud:owncloud:8.2.4:*:*:*:*:*:*:*", "cpe:2.3:a:owncloud:owncloud:8.2.5:*:*:*:*:*:*:*", "cpe:2.3:a:owncloud:owncloud:8.2.6:*:*:*:*:*:*:*", "cpe:2.3:a:owncloud:owncloud:8.2.7:*:*:*:*:*:*:*", "cpe:2.3:a:owncloud:owncloud:8.2.8:*:*:*:*:*:*:*", "cpe:2.3:a:owncloud:owncloud:9.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:owncloud:owncloud:9.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:owncloud:owncloud:9.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:owncloud:owncloud:9.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:owncloud:owncloud:9.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:owncloud:owncloud:9.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:owncloud:owncloud:9.0.6:*:*:*:*:*:*:*", "cpe:2.3:a:owncloud:owncloud:9.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:owncloud:owncloud:9.1.1:*:*:*:*:*:*:*", "cpe:2.3:a:owncloud:owncloud:9.1.2:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "8.2.2" }, { "last_affected": "8.2.2" }, { "introduced": "8.2.3" }, { "last_affected": "8.2.3" }, { "introduced": "8.2.4" }, { "last_affected": "8.2.4" }, { "introduced": "8.2.5" }, { "last_affected": "8.2.5" }, { "introduced": "8.2.6" }, { "last_affected": "8.2.6" }, { "introduced": "8.2.7" }, { "last_affected": "8.2.7" }, { "introduced": "8.2.8" }, { "last_affected": "8.2.8" }, { "introduced": "9.0.0" }, { "last_affected": "9.0.0" }, { "introduced": "9.0.1" }, { "last_affected": "9.0.1" }, { "introduced": "9.0.2" }, { "last_affected": "9.0.2" }, { "introduced": "9.0.3" }, { "last_affected": "9.0.3" }, { "introduced": "9.0.4" }, { "last_affected": "9.0.4" }, { "introduced": "9.0.5" }, { "last_affected": "9.0.5" }, { "introduced": "9.0.6" }, { "last_affected": "9.0.6" }, { "introduced": "9.1.0" }, { "last_affected": "9.1.0" }, { "introduced": "9.1.1" }, { "last_affected": "9.1.1" }, { "introduced": "9.1.2" }, { "last_affected": "9.1.2" } ], "source": "CPE_STRING" } ], "vendor_product": "owncloud:owncloud" } ] }- References
Affected packages
Git / github.com/owncloud/core
Affected ranges
- Type
- GIT
- Repo
- https://github.com/owncloud/core
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*", "range": [ { "introduced": "0" }, { "last_affected": "8.1.10" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:owncloud:owncloud:8.2.2:*:*:*:*:*:*:*", "range": [ { "introduced": "8.2.2" }, { "last_affected": "8.2.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:owncloud:owncloud:8.2.3:*:*:*:*:*:*:*", "range": [ { "introduced": "8.2.3" }, { "last_affected": "8.2.3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:owncloud:owncloud:8.2.4:*:*:*:*:*:*:*", "range": [ { "introduced": "8.2.4" }, { "last_affected": "8.2.4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:owncloud:owncloud:8.2.5:*:*:*:*:*:*:*", "range": [ { "introduced": "8.2.5" }, { "last_affected": "8.2.5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:owncloud:owncloud:8.2.6:*:*:*:*:*:*:*", "range": [ { "introduced": "8.2.6" }, { "last_affected": "8.2.6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:owncloud:owncloud:8.2.7:*:*:*:*:*:*:*", "range": [ { "introduced": "8.2.7" }, { "last_affected": "8.2.7" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:owncloud:owncloud:8.2.8:*:*:*:*:*:*:*", "range": [ { "introduced": "8.2.8" }, { "last_affected": "8.2.8" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:owncloud:owncloud:9.0.0:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0" }, { "last_affected": "9.0.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:owncloud:owncloud:9.0.1:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.1" }, { "last_affected": "9.0.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:owncloud:owncloud:9.0.2:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.2" }, { "last_affected": "9.0.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:owncloud:owncloud:9.0.3:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.3" }, { "last_affected": "9.0.3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:owncloud:owncloud:9.0.4:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.4" }, { "last_affected": "9.0.4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:owncloud:owncloud:9.0.5:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.5" }, { "last_affected": "9.0.5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:owncloud:owncloud:9.0.6:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.6" }, { "last_affected": "9.0.6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:owncloud:owncloud:9.1.0:*:*:*:*:*:*:*", "range": [ { "introduced": "9.1.0" }, { "last_affected": "9.1.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:owncloud:owncloud:9.1.1:*:*:*:*:*:*:*", "range": [ { "introduced": "9.1.1" }, { "last_affected": "9.1.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:owncloud:owncloud:9.1.2:*:*:*:*:*:*:*", "range": [ { "introduced": "9.1.2" }, { "last_affected": "9.1.2" } ], "source": "CPE_STRING" } ] }
Affected versions
8.*
8.2.2
8.2.3
8.2.4
8.2.5
8.2.6
8.2.7
8.2.8
9.*
9.0.0
9.0.1
9.0.2
9.0.3
9.0.4
9.0.5
9.0.6
9.1.0
9.1.1
9.1.2
v1.*
v1.0.0beta1
v3.*
v3.0
v4.*
v4.0.0
v4.0.0RC
v4.0.0RC2
v4.0.0beta
v4.0.1
v4.0.4
v4.0.5
v4.0.6
v4.5.0
v4.5.0RC1
v4.5.0RC2
v4.5.0RC3
v4.5.0beta3
v4.5.0beta4
v5.*
v5.0.0
v5.0.0RC1
v5.0.0RC2
v5.0.0RC3
v5.0.0alpha1
v5.0.0beta1
v5.0.0beta2
v6.*
v6.0.0RC1
v6.0.0RC2
v6.0.0alpha2
v6.0.0beta2
v6.0.0beta3
v6.0.0beta4
v6.0.0beta5
v7.*
v7.0.0alpha2
v7.0.0beta1
v8.*
v8.0.0
v8.0.0RC1
v8.0.0RC2
v8.0.0alpha1
v8.0.0alpha2
v8.0.0beta1
v8.0.0beta2
v8.1.0
v8.1.0alpha1
v8.1.0alpha2
v8.1.0beta1
v8.1.0beta2
v8.1.1
v8.1.10
v8.1.10RC1
v8.1.1RC1
v8.1.1beta
v8.1.1beta1
v8.1.2
v8.1.2RC1
v8.1.3
v8.1.4
v8.1.4RC1
v8.1.4RC2
v8.1.5
v8.1.5RC1
v8.1.6
v8.1.6RC1
v8.1.6RC2
v8.1.7
v8.1.7RC1
v8.1.7RC2
v8.1.8RC1
v8.1.8RC2
v8.1.9
v8.1.9RC1
v8.1.9RC2
v8.1RC2
v8.2RC1
v8.2beta1
v9.*
v9.0.0beta2
v9.0.1beta2
v9.0beta1
v9.1.0
v9.1.0RC1
v9.1.0RC2
v9.1.0RC3
v9.1.0RC4
v9.1.0beta1
v9.1.0beta2
v9.1.1
v9.1.1RC1
v9.1.1RC2
v9.1.1RC3
v9.1.2
v9.1.2RC1
v9.1.2RC2