CVE-2016-1501

EUVD-2016-2599
ownCloud Server before 8.0.9 and 8.1.x before 8.1.4 allow remote authenticated users to obtain sensitive information via unspecified vectors, which reveals the installation path in the resulting exception messages.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 41%
Affected Products (NVD)
VendorProductVersion
owncloudowncloud
𝑥
≤ 8.0.8
owncloudowncloud_server
8.1.0
owncloudowncloud_server
8.1.1
owncloudowncloud_server
8.1.3
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
owncloud
precise
not-affected
trusty
dne
vivid
dne
wily
dne
Common Weakness Enumeration
References
https://owncloud.org/security/advisory/?id=oc-sa-2016-004
https://owncloud.org/security/advisory/?id=oc-sa-2016-004