CVE-2013-2047
Published Mar 14, 2014
Last updated 11 years ago
Overview
- Description
- The login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting for the password parameter, which makes it easier for physically proximate attackers to guess the password.
- Source
- secalert@redhat.com
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 2.1
- Impact score
- 2.9
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-264
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "91C054D8-4161-4B1A-A7C2-BC9CF9C40FDC",
"versionEndIncluding": "5.0.5"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud:5.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF826F2B-83E1-4E64-A56C-B564028EBD6A"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22A19441-2041-45DC-9F59-783C9B1FF9D5"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud:5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "43448288-B129-4210-9680-55836869F09F"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud:5.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78639CDB-3763-4E71-B4F9-E51E5A261A16"
},
{
"criteria": "cpe:2.3:a:owncloud:owncloud:5.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8DBE1CE3-7A8D-4C97-8066-F59C346A0494"
}
],
"operator": "OR"
}
]
}
]