ID de Prueba:	1.3.6.1.4.1.25623.1.0.804657
Categoría:	Web application abuses
Título:	ownCloud Multiple Vulnerabilities-02 (Jul 2014)
Resumen:	ownCloud is prone to multiple vulnerabilities.
Descripción:	Summary: ownCloud is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - The program fails to properly sanitize LDAP queries. - An incorrectly configured XML parser accepting XML external entities from an untrusted source Vulnerability Impact: Successful exploitation will allow remote attackers to gain information about existing LDAP users and potentially modify the login query, read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack. Affected Software/OS: ownCloud Server 5.0.x before 5.0.15 and 6.0.x before 6.0.2 Solution: Update to version 5.0.15 or 6.0.2 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-2051 Common Vulnerability Exposure (CVE) ID: CVE-2014-2053 Debian Security Information: DSA-3001 (Google Search) http://www.debian.org/security/2014/dsa-3001 http://secunia.com/advisories/58002 Common Vulnerability Exposure (CVE) ID: CVE-2014-2054 Common Vulnerability Exposure (CVE) ID: CVE-2014-2055 Common Vulnerability Exposure (CVE) ID: CVE-2014-2056
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.