Vulnerability Details CVE-2014-9049
The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote authenticated users to obtain all valid session IDs via an unspecified API method.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.8%
CVSS Severity
CVSS v2 Score 4.0
References
Products affected by CVE-2014-9049
-
cpe:2.3:a:owncloud:owncloud_server:6.0.0
-
cpe:2.3:a:owncloud:owncloud_server:6.0.1
-
cpe:2.3:a:owncloud:owncloud_server:6.0.2
-
cpe:2.3:a:owncloud:owncloud_server:6.0.3
-
cpe:2.3:a:owncloud:owncloud_server:6.0.4
-
cpe:2.3:a:owncloud:owncloud_server:6.0.5
-
cpe:2.3:a:owncloud:owncloud_server:7.0.0
-
cpe:2.3:a:owncloud:owncloud_server:7.0.1
-
cpe:2.3:a:owncloud:owncloud_server:7.0.2