[Owncloud] Security flaw

Ron Trompert ron.trompert at surfsara.nl
Thu Jun 20 07:32:18 UTC 2013


Hi,

Yesterday I have installed Owncloud 5.0.7. I have configured the admin user and in addition, I have allowed for other user to authenticate themselves using another webdav server. All of this works, but now I am able to login to the admin account using any password.

Cheers,

Ron Trompert
SURFsara
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4449 bytes
Desc: not available
URL: <http://mail.kde.org/pipermail/owncloud/attachments/20130620/b9c4a185/attachment.bin>


More information about the Owncloud mailing list