Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2021-35948

Опубликовано: 07 сент. 2021
Источник: debian

Описание

Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
owncloudremovedpackage

Связанные уязвимости

CVSS3: 5.4
ubuntu
больше 4 лет назад

Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie.

CVSS3: 5.4
nvd
больше 4 лет назад

Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie.

github
больше 3 лет назад

Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie.