Описание
The login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting for the password parameter, which makes it easier for physically proximate attackers to guess the password.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 5.0.5 (включая)
Одно из
cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*
cpe:2.3:a:owncloud:owncloud_server:5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:owncloud:owncloud_server:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:owncloud:owncloud_server:5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:owncloud:owncloud_server:5.0.3:*:*:*:*:*:*:*
cpe:2.3:a:owncloud:owncloud_server:5.0.4:*:*:*:*:*:*:*
EPSS
Процентиль: 19%
0.00061
Низкий
2.1 Low
CVSS2
Дефекты
CWE-264
Связанные уязвимости
ubuntu
почти 12 лет назад
The login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting for the password parameter, which makes it easier for physically proximate attackers to guess the password.
debian
почти 12 лет назад
The login page (aka index.php) in ownCloud before 5.0.6 does not disab ...
github
больше 3 лет назад
The login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting for the password parameter, which makes it easier for physically proximate attackers to guess the password.
EPSS
Процентиль: 19%
0.00061
Низкий
2.1 Low
CVSS2
Дефекты
CWE-264