CVE-2016-1499
- State
- Published
- Severity
- Not scored
- Published
- Jan 8, 2016
- Updated
- Aug 5, 2024
- Reserved
- Jan 6, 2016
Description
ownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote authenticated users to obtain sensitive information from a directory listing and possibly cause a denial of service (CPU consumption) via the force parameter to index.php/apps/files/ajax/scan.php.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20160107 [SYSS-2015-062] ownCloud Information Exposure Through Directory Listing (CVE-2016-1499)mailing-list
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2015-062.txt
- http://packetstormsecurity.com/files/135158/ownCloud-8.2.1-8.1.4-8.0.9-Information-Exposure.html
- 20160219 [SYSS-2015-062] ownCloud - Information Exposure Through Directory Listing (CWE-548)mailing-list
- https://owncloud.org/security/advisory/?id=oc-sa-2016-002
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.