← Voltar para CVEs
CVE-2013-2047
N/ADescricao
The login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting for the password parameter, which makes it easier for physically proximate attackers to guess the password.
Detalhes CVE
Pontuacao CVSS v3.1N/A
Publicado3/14/2014
Ultima modificacao4/12/2025
Fontenvd
Avistamentos honeypot0
Produtos afetados
owncloud:owncloudowncloud:owncloud_server
Fraquezas (CWE)
CWE-264
Referencias
http://owncloud.org/about/security/advisories/oC-SA-2013-023/(secalert@redhat.com)
http://owncloud.org/about/security/advisories/oC-SA-2013-023/(af854a3a-2127-422b-91ae-364da2661108)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.