ownCloud Improper Authentication Vulnerability - CVE-2012-4392 - Vulnerability Database

ownCloud Improper Authentication Vulnerability - CVE-2012-4392

High

Reference: CVE-2012-4392

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2012-4392

Title: ownCloud Improper Authentication Vulnerability

Overview:

index.php in ownCloud 4.0.7 does not properly validate the oc_token cookie which allows remote attackers to bypass authentication via a crafted oc_token cookie value.