CVE-2016-9462
28.03.2017, 02:59
Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore privileges when restoring a file. The restore capability of Nextcloud/ownCloud was not verifying whether a user has only read-only access to a share. Thus a user with read-only access was able to restore old versions.Enginsight
| Vendor | Product | Version |
|---|---|---|
| nextcloud | nextcloud_server | 𝑥 < 9.0.52 |
| owncloud | owncloud | 𝑥 < 9.0.4 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References