CVE-2014-2049

The default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows remote attackers to access user files via unspecified vectors.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2014-03-14

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Owncloud (Owncloud)
• Owncloud Server (Owncloud)

References

• http://owncloud.org/about/security/advisories/oC-SA-2014-003/