CVE-2017-9339 Information disclosure in n/a

What is CVE-2017-9339?

CVE-2017-9339 is a medium-severity vulnerability in Owncloud Owncloud, published on 17 Jul 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A logical error in ownCloud Server before 10.0.2 caused disclosure of valid share tokens for public calendars. Thus granting an attacker potentially access to publicly shared calendars without knowing the share token.

Which versions are affected by CVE-2017-9339?

It affects 1 product.

Products include Owncloud Owncloud.

How do I fix CVE-2017-9339?

No fix has been published for CVE-2017-9339 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-9339 being exploited?

There is no known exploitation of CVE-2017-9339 in the wild and no public exploit code.

Other vulnerabilities in Owncloud Owncloud

• CVE-2021-35946 Privilege escalation in n/a Critical 9.8
• CVE-2014-2052 XML external entity in n/a Critical 9.8
• CVE-2014-2048 Auth bypass in n/a Critical 9.8
• CVE-2020-28645 Path traversal in n/a Critical 9.1
• CVE-2015-4718 Command injection in n/a Critical 9.0

All Owncloud Owncloud vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-pf4h-hrv7-mq9v.