Unscored CVE-2012-4392 EUVD-2012-4332GHSA-rv2q-w6gm-pjm2

index.php in ownCloud 4.0.7 does not properly validate the oc_token cookie, which allows remote attackers to bypass authentication via a cr…

Published Sep 5, 2012 · Updated Sep 16, 2024 · Assigned by redhat

Description

index.php in ownCloud 4.0.7 does not properly validate the oc_token cookie, which allows remote attackers to bypass authentication via a crafted oc_token cookie value.

References

[oss-security] 20120810 ownCloud - matching CVEs to fix information and vice versa mailing-list
[oss-security] 20120901 Re: CVE - ownCloud mailing-list
https://github.com/owncloud/core/commit/4fd069b47906ebcf83887970c732d464dbe7d37a