CVE-2014-2048

The user_openid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID implementation.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-03-26

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Owncloud (Owncloud)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/91973
• https://owncloud.org/security/advisories/insecure-openid-implementation/