| Package | Affected versions | Patched versions |
|---|---|---|
| owncloud | ≤ 5.0.17 | |
| owncloud server | = 5.0.0= 5.0.1= 5.0.10= 5.0.11= 5.0.12= 5.0.13= 5.0.14= 5.0.15= 5.0.16= 5.0.2= 5.0.3= 5.0.4= 5.0.5= 5.0.6= 5.0.7= 5.0.8= 5.0.9= 6.0.0= 6.0.1= 6.0.2= 6.0.3= 6.0.4= 6.0.5= 7.0.0= 7.0.1= 7.0.2 |
The user_ldap (aka LDAP user and group backend) application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to bypass authentication via a null byte in the password and a valid user name, which triggers an unauthenticated bind.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free