cbcvebase.
CVE-2013-1941
published 2014-06-04

CVE-2013-1941: The installation routine in ownCloud Server before 4.0.14, 4.5.x before 4.5.9, and 5.0.x before 5.0.4 uses the time function to seed the generation of the…

PriorityP423medium5CVSS 2.0
AVNACLAuNCNIPAN
EPSS
1.12%
62.0th percentile
The installation routine in ownCloud Server before 4.0.14, 4.5.x before 4.5.9, and 5.0.x before 5.0.4 uses the time function to seed the generation of the PostgreSQL database user password, which makes it easier for remote attackers to guess the password via a brute force attack.

Affected

27 ranges· showing 25
VendorProductVersion rangeFixed in
owncloudowncloud<= 4.0.13
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
owncloudowncloud_server
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.