Логотип exploitDog
bind:CVE-2016-9461
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2016-9461

Количество 4

Количество 4

ubuntu логотип

CVE-2016-9461

около 8 лет назад

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions. The WebDAV endpoint was not properly checking the permission on a WebDAV COPY action. This allowed an authenticated attacker with access to a read-only share to put new files in there. It was not possible to modify existing files.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2016-9461

около 8 лет назад

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions. The WebDAV endpoint was not properly checking the permission on a WebDAV COPY action. This allowed an authenticated attacker with access to a read-only share to put new files in there. It was not possible to modify existing files.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2016-9461

около 8 лет назад

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not ...

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-92wm-vqxv-vpf9

около 3 лет назад

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions. The WebDAV endpoint was not properly checking the permission on a WebDAV COPY action. This allowed an authenticated attacker with access to a read-only share to put new files in there. It was not possible to modify existing files.

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2016-9461

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions. The WebDAV endpoint was not properly checking the permission on a WebDAV COPY action. This allowed an authenticated attacker with access to a read-only share to put new files in there. It was not possible to modify existing files.

CVSS3: 4.3
1%
Низкий
около 8 лет назад
nvd логотип
CVE-2016-9461

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions. The WebDAV endpoint was not properly checking the permission on a WebDAV COPY action. This allowed an authenticated attacker with access to a read-only share to put new files in there. It was not possible to modify existing files.

CVSS3: 4.3
1%
Низкий
около 8 лет назад
debian логотип
CVE-2016-9461

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not ...

CVSS3: 4.3
1%
Низкий
около 8 лет назад
github логотип
GHSA-92wm-vqxv-vpf9

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions. The WebDAV endpoint was not properly checking the permission on a WebDAV COPY action. This allowed an authenticated attacker with access to a read-only share to put new files in there. It was not possible to modify existing files.

CVSS3: 4.3
1%
Низкий
около 3 лет назад

Уязвимостей на страницу