| Package | Affected versions | Patched versions |
|---|---|---|
| owncloud | ≤ 5.0.5 | |
| owncloud server | = 5.0.0= 5.0.1= 5.0.2= 5.0.3= 5.0.4 |
The login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting for the password parameter, which makes it easier for physically proximate attackers to guess the password.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free