CVE-2013-6403 — Owncloud vulnerability

CWE-2645 documents4 sources
Severity
6.8MEDIUMNVD
EPSS
0.3%
top 42.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
OwncloudOwncloud Server
Timeline
PublishedDec 24
Latest updateMay 17

Description

The admin page in ownCloud before 5.0.13 allows remote attackers to bypass intended access restrictions via unspecified vectors, related to MariaDB.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages2 packages

▶NVDowncloud/owncloud5.0.12
▶NVDowncloud/owncloud_server12 versions+11

🔴Vulnerability Details

2
GHSA
GHSA-c97p-wf7p-5c6r: The admin page in ownCloud before 5↗2022-05-17
▶
CVEList
CVE-2013-6403: The admin page in ownCloud before 5↗2013-12-24
▶

💬Community

2
Bugzilla
CVE-2013-6403 owncloud: possible security bypass on admin page (5.0.13)↗2013-11-28
▶
Bugzilla
CVE-2013-6403 owncloud: possible security bypass on admin page (5.0.13) [fedora-all]↗2013-11-28
▶
CVE-2013-6403 — Owncloud vulnerability | cvebase