Critical bug in ownCloud file sharing app exposes admin passwords
Critical bug in ownCloud file sharing app exposes admin passwords
Open source file sharing software ownCloud is warning of three critical-severity security vulnerabilities, including one that can expose administrator passwords and mail server credentials.
If you’re running the latest version of Nextcloud (27.1.3) this is already patched.
3Does anyone know which version of OwnCloud is patched? e.g 10.13.0
1More like ownedCloud
1pwnedCloud
1
Has anyone found a reference for which ownCloud versions are affected/patched? Recent release notes don’t mention these vulnerabilities.
1is this for the PHP version or the new Golang version?
1PHP
1
This is why it's important to have other security monitoring resources on your network if you intend to open ports or expose your services to the Internet. Also a good time to change all your passwords if you have not already.
1