ID de Prueba:	1.3.6.1.4.1.25623.1.0.805282
Categoría:	Web application abuses
Título:	ownCloud Asset Pipeline Feature Remote Path Disclosure Vulnerability (oC-SA-2014-021)
Resumen:	ownCloud is prone to a path disclosure vulnerability.
Descripción:	Summary: ownCloud is prone to a path disclosure vulnerability. Vulnerability Insight: The error exists due to flaw in the Asset Pipeline feature due to the program is generating files on the local filesystem with a filename that is created by hashing the original CSS and JS absolute file paths using MD5. Vulnerability Impact: Successful exploitation will allow remote attackers to conduct a brute-force attack and gain access to the installation path of the program. Affected Software/OS: ownCloud Server 7.x before 7.0.3 Solution: Upgrade to ownCloud Server 7.0.3 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-9044
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.