Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-2056
HistoryJun 04, 2014 - 12:00 a.m.

CVE-2014-2056

2014-06-0400:00:00
ubuntu.com
ubuntu.com
19

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.006

Percentile

77.6%

PHPDocX, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2,
allows remote attackers to read arbitrary files, cause a denial of service,
or possibly have other impact via an XML External Entity (XXE) attack.

Notes

Author Note
mdeslaur owncloud packages in Ubuntu are now empty

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.006

Percentile

77.6%

Related for UB:CVE-2014-2056