CVE-2017-5865

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2017-5865

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5865.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-5865

Published

2017-03-03T15:59:01.320Z

Modified

2026-07-08T05:48:47.591436510Z

Severity

3.7 (Low) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

[none]

Details

The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 sends different error messages depending on whether the username is valid, which allows remote attackers to enumerate user names via a large number of password reset attempts.

Database specific

{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "8.2.2"
                },
                {
                    "last_affected": "8.2.2"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "owncloud:owncloud",
            "cpes": [
                "cpe:2.3:a:owncloud:owncloud:8.2.2:*:*:*:*:*:*:*"
            ]
        }
    ]
}

References

Affected packages

Git / github.com/owncloud/core

Affected ranges

Type

GIT

Repo

https://github.com/owncloud/core

Events

Introduced

Last affected

aa914163423247fc38885a7d466325db28edb73f

Introduced

d60d903e75296950a52a0e25c7cd31f5b55ab68f

Last affected

d47c589b0429eafa5add3a9ffc1c89f8ecccf9cc

Database specific

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.10"
        },
        {
            "introduced": "8.2.2"
        },
        {
            "last_affected": "8.2.2"
        },
        {
            "introduced": "8.2.3"
        },
        {
            "last_affected": "8.2.3"
        },
        {
            "introduced": "8.2.4"
        },
        {
            "last_affected": "8.2.4"
        },
        {
            "introduced": "8.2.5"
        },
        {
            "last_affected": "8.2.5"
        },
        {
            "introduced": "8.2.6"
        },
        {
            "last_affected": "8.2.6"
        },
        {
            "introduced": "8.2.7"
        },
        {
            "last_affected": "8.2.7"
        },
        {
            "introduced": "8.2.8"
        },
        {
            "last_affected": "8.2.8"
        },
        {
            "introduced": "9.0.0"
        },
        {
            "last_affected": "9.0.0"
        },
        {
            "introduced": "9.0.1"
        },
        {
            "last_affected": "9.0.1"
        },
        {
            "introduced": "9.0.2"
        },
        {
            "last_affected": "9.0.2"
        },
        {
            "introduced": "9.0.3"
        },
        {
            "last_affected": "9.0.3"
        },
        {
            "introduced": "9.0.4"
        },
        {
            "last_affected": "9.0.4"
        },
        {
            "introduced": "9.0.5"
        },
        {
            "last_affected": "9.0.5"
        },
        {
            "introduced": "9.0.6"
        },
        {
            "last_affected": "9.0.6"
        },
        {
            "introduced": "9.1.0"
        },
        {
            "last_affected": "9.1.0"
        },
        {
            "introduced": "9.1.1"
        },
        {
            "last_affected": "9.1.1"
        },
        {
            "introduced": "9.1.2"
        },
        {
            "last_affected": "9.1.2"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud:8.2.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud:8.2.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud:8.2.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud:8.2.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud:8.2.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud:8.2.7:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud:8.2.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud:9.0.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud:9.0.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud:9.0.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud:9.0.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud:9.0.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud:9.0.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud:9.0.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud:9.1.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud:9.1.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:owncloud:owncloud:9.1.2:*:*:*:*:*:*:*"
    ]
}

Affected versions

8.*

8.2.2

8.2.3

8.2.4

8.2.5

8.2.6

8.2.7

8.2.8

9.*

9.0.0

9.0.1

9.0.2

9.0.3

9.0.4

9.0.5

9.0.6

9.1.0

9.1.1

9.1.2

v1.*

v1.0.0beta1

v3.*

v3.0

v4.*

v4.0.0

v4.0.0RC

v4.0.0RC2

v4.0.0beta

v4.0.1

v4.0.4

v4.0.5

v4.0.6

v4.5.0

v4.5.0RC1

v4.5.0RC2

v4.5.0RC3

v4.5.0beta3

v4.5.0beta4

v5.*

v5.0.0

v5.0.0RC1

v5.0.0RC2

v5.0.0RC3

v5.0.0alpha1

v5.0.0beta1

v5.0.0beta2

v6.*

v6.0.0RC1

v6.0.0RC2

v6.0.0alpha2

v6.0.0beta2

v6.0.0beta3

v6.0.0beta4

v6.0.0beta5

v7.*

v7.0.0alpha2

v7.0.0beta1

v8.*

v8.0.0

v8.0.0RC1

v8.0.0RC2

v8.0.0alpha1

v8.0.0alpha2

v8.0.0beta1

v8.0.0beta2

v8.1.0

v8.1.0alpha1

v8.1.0alpha2

v8.1.0beta1

v8.1.0beta2

v8.1.1

v8.1.10

v8.1.10RC1

v8.1.1RC1

v8.1.1beta

v8.1.1beta1

v8.1.2

v8.1.2RC1

v8.1.3

v8.1.4

v8.1.4RC1

v8.1.4RC2

v8.1.5

v8.1.5RC1

v8.1.6

v8.1.6RC1

v8.1.6RC2

v8.1.7

v8.1.7RC1

v8.1.7RC2

v8.1.8RC1

v8.1.8RC2

v8.1.9

v8.1.9RC1

v8.1.9RC2

v8.1RC2

v8.2RC1

v8.2beta1

v9.*

v9.0.0beta2

v9.0.1beta2

v9.0beta1

v9.1.0

v9.1.0RC1

v9.1.0RC2

v9.1.0RC3

v9.1.0RC4

v9.1.0beta1

v9.1.0beta2

v9.1.1

v9.1.1RC1

v9.1.1RC2

v9.1.1RC3

v9.1.2

v9.1.2RC1

v9.1.2RC2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5865.json"