CVE-2016-1501

ownCloud Server before 8.0.9 and 8.1.x before 8.1.4 allow remote authenticated users to obtain sensitive information via unspecified vectors, which reveals the installation path in the resulting exception messages.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 41%
VendorProductVersion
owncloudowncloud
𝑥
≤ 8.0.8
owncloudowncloud_server
8.1.0
owncloudowncloud_server
8.1.1
owncloudowncloud_server
8.1.3
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
owncloud
wily
dne
vivid
dne
trusty
dne
precise
not-affected
Common Weakness Enumeration
References
https://owncloud.org/security/advisory/?id=oc-sa-2016-004
https://owncloud.org/security/advisory/?id=oc-sa-2016-004