ownCloud Credentials Management Errors Vulnerability - CVE-2012-5607 - Vulnerability Database

ownCloud Credentials Management Errors Vulnerability - CVE-2012-5607

Medium

Reference: CVE-2012-5607

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2012-5607

Title: ownCloud Credentials Management Errors Vulnerability

Overview:

The quotLost Passwordquot reset functionality in ownCloud before 4.0.9 and 4.5.0 does not properly check the security token which allows remote attackers to change an accounts password via unspecified vectors related to a quotRemote Timing Attack.quot