Описание
The login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting for the password parameter, which makes it easier for physically proximate attackers to guess the password.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 6.0.1+dfsg-1ubuntu1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected [6.0.1+dfsg-1ubuntu1]] |
| lucid | DNE | |
| precise | not-affected | |
| quantal | not-affected | 4.0.8debian-1.1ubuntu0.1 |
| raring | ignored | end of life |
| saucy | not-affected | 5.0.10+dfsg-1ubuntu1 |
| trusty | not-affected | 6.0.1+dfsg-1ubuntu1 |
| trusty/esm | DNE | trusty was not-affected [6.0.1+dfsg-1ubuntu1] |
| upstream | released | 5.0.6 |
Показывать по
EPSS
2.1 Low
CVSS2
Связанные уязвимости
The login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting for the password parameter, which makes it easier for physically proximate attackers to guess the password.
The login page (aka index.php) in ownCloud before 5.0.6 does not disab ...
The login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting for the password parameter, which makes it easier for physically proximate attackers to guess the password.
EPSS
2.1 Low
CVSS2