CVE-2016-1499

Published Jan 8, 2016

Last updated 11 hours ago

Overview

Description
ownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote authenticated users to obtain sensitive information from a directory listing and possibly cause a denial of service (CPU consumption) via the force parameter to index.php/apps/files/ajax/scan.php.
Source
cve@mitre.org
NVD status
Modified

Risk scores

CVSS 3.0

Type
Primary
Base score
8.5
Impact score
4.7
Exploitability score
3.1
Vector string
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H
Severity
HIGH

CVSS 2.0

Type
Primary
Base score
7.5
Impact score
7.8
Exploitability score
8
Vector string
AV:N/AC:L/Au:S/C:P/I:N/A:C

Weaknesses

nvd@nist.gov
CWE-200

Social media

Hype score
Not currently trending

Configurations