CVE-2013-2086

The configuration loader in ownCloud 5.0.x before 5.0.6 allows remote attackers to obtain CSRF tokens and other sensitive information by reading an unspecified JavaScript file.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://owncloud.org/about/security/advisories/oC-SA-2013-027/	Patch Vendor Advisory
http://owncloud.org/about/security/advisories/oC-SA-2013-027/	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:owncloud:owncloud_server:5.0.0:::::::*
	cpe:2.3:a:owncloud:owncloud_server:5.0.1:::::::*
	cpe:2.3:a:owncloud:owncloud_server:5.0.2:::::::*
	cpe:2.3:a:owncloud:owncloud_server:5.0.3:::::::*
	cpe:2.3:a:owncloud:owncloud_server:5.0.4:::::::*
	cpe:2.3:a:owncloud:owncloud_server:5.0.5:::::::*

History

31 Mar 2025, 11:54

Type	Values Removed	Values Added
First Time		Owncloud owncloud Server
CPE	cpe:2.3:a:owncloud:owncloud:5.0.0:::::::* cpe:2.3:a:owncloud:owncloud:5.0.3:::::::* cpe:2.3:a:owncloud:owncloud:5.0.4:::::::* cpe:2.3:a:owncloud:owncloud:5.0.1:::::::* cpe:2.3:a:owncloud:owncloud:5.0.2:::::::* cpe:2.3:a:owncloud:owncloud:5.0.5:::::::*	cpe:2.3:a:owncloud:owncloud_server:5.0.0:::::::* cpe:2.3:a:owncloud:owncloud_server:5.0.3:::::::* cpe:2.3:a:owncloud:owncloud_server:5.0.4:::::::* cpe:2.3:a:owncloud:owncloud_server:5.0.5:::::::* cpe:2.3:a:owncloud:owncloud_server:5.0.2:::::::* cpe:2.3:a:owncloud:owncloud_server:5.0.1:::::::*

Information

Published : 2014-03-14 16:55

Updated : 2025-04-12 10:46

NVD link : CVE-2013-2086

Mitre link : CVE-2013-2086

CVE.ORG link : CVE-2013-2086

JSON object : View

Products Affected

owncloud

owncloud_server

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2013-2086", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-03-14T16:55:05.507", "references": [{"url": "http://owncloud.org/about/security/advisories/oC-SA-2013-027/", "tags": ["Patch", "Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://owncloud.org/about/security/advisories/oC-SA-2013-027/", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "The configuration loader in ownCloud 5.0.x before 5.0.6 allows remote attackers to obtain CSRF tokens and other sensitive information by reading an unspecified JavaScript file."}, {"lang": "es", "value": "El cargador de configuraci\u00f3n en ownCloud 5.0.x anterior a 5.0.6 permite a atacantes remotos obtener tokens CSRF y otra informaci\u00f3n sensible mediante la lectura de un archivo JavaScript no especificado."}], "lastModified": "2025-04-12T10:46:40.837", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D89BE316-CE49-49CB-85FB-B93C86E07276"}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD902884-4F28-4AF6-A8D7-A6CD15048B0C"}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B18395A6-B385-4ADB-9278-5F59FF339F1F"}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94834DA8-247E-4A53-A95A-708AF7F9AC4E"}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "35203A98-76CE-4475-9C4A-60E6A1990B8A"}, {"criteria": "cpe:2.3:a:owncloud:owncloud_server:5.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B1C940B-E6FE-41D5-8313-E6498331E9F5"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}