cvelist/2016/15xxx/CVE-2016-15014.json

{
    "data_version": "4.0",
    "data_type": "CVE",
    "data_format": "MITRE",
    "CVE_data_meta": {
        "ID": "CVE-2016-15014",
        "ASSIGNER": "cna@vuldb.com",
        "STATE": "PUBLIC"
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "A vulnerability has been found in CESNET theme-cesnet up to 1.x on ownCloud and classified as problematic. Affected by this vulnerability is an unknown functionality of the file cesnet/core/lostpassword/templates/resetpassword.php. The manipulation leads to insufficiently protected credentials. Attacking locally is a requirement. Upgrading to version 2.0.0 is able to address this issue. The identifier of the patch is 2b857f2233ce5083b4d5bc9bfc4152f933c3e4a6. It is recommended to upgrade the affected component. The identifier VDB-217633 was assigned to this vulnerability."
            },
            {
                "lang": "deu",
                "value": "In CESNET theme-cesnet bis 1.x f\u00fcr ownCloud wurde eine Schwachstelle gefunden. Sie wurde als problematisch eingestuft. Dabei geht es um eine nicht genauer bekannte Funktion der Datei cesnet/core/lostpassword/templates/resetpassword.php. Durch das Beeinflussen mit unbekannten Daten kann eine insufficiently protected credentials-Schwachstelle ausgenutzt werden. Der Angriff muss lokal angegangen werden. Ein Aktualisieren auf die Version 2.0.0 vermag dieses Problem zu l\u00f6sen. Der Patch wird als 2b857f2233ce5083b4d5bc9bfc4152f933c3e4a6 bezeichnet. Als bestm\u00f6gliche Massnahme wird das Einspielen eines Upgrades empfohlen."
            }
        ]
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "CWE-522 Insufficiently Protected Credentials",
                        "cweId": "CWE-522"
                    }
                ]
            }
        ]
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "CESNET",
                    "product": {
                        "product_data": [
                            {
                                "product_name": "theme-cesnet",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_affected": "=",
                                            "version_value": "1.x"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            ]
        }
    },
    "references": {
        "reference_data": [
            {
                "url": "https://vuldb.com/?id.217633",
                "refsource": "MISC",
                "name": "https://vuldb.com/?id.217633"
            },
            {
                "url": "https://vuldb.com/?ctiid.217633",
                "refsource": "MISC",
                "name": "https://vuldb.com/?ctiid.217633"
            },
            {
                "url": "https://github.com/CESNET/theme-cesnet/pull/1",
                "refsource": "MISC",
                "name": "https://github.com/CESNET/theme-cesnet/pull/1"
            },
            {
                "url": "https://github.com/CESNET/theme-cesnet/commit/2b857f2233ce5083b4d5bc9bfc4152f933c3e4a6",
                "refsource": "MISC",
                "name": "https://github.com/CESNET/theme-cesnet/commit/2b857f2233ce5083b4d5bc9bfc4152f933c3e4a6"
            },
            {
                "url": "https://github.com/CESNET/theme-cesnet/releases/tag/2.0.0",
                "refsource": "MISC",
                "name": "https://github.com/CESNET/theme-cesnet/releases/tag/2.0.0"
            }
        ]
    },
    "credits": [
        {
            "lang": "en",
            "value": "VulDB GitHub Commit Analyzer"
        }
    ],
    "impact": {
        "cvss": [
            {
                "version": "3.1",
                "baseScore": 3.3,
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                "baseSeverity": "LOW"
            },
            {
                "version": "3.0",
                "baseScore": 3.3,
                "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                "baseSeverity": "LOW"
            },
            {
                "version": "2.0",
                "baseScore": 1.7,
                "vectorString": "AV:L/AC:L/Au:S/C:P/I:N/A:N"
            }
        ]
    }
}