CVE-2023-49103

Producto

ownCloud / ownCloud graphapi

Vulnerabilidad

ownCloud graphapi Information Disclosure Vulnerability

Añadido a KEV

30 nov 2023

Remediar antes de

21 dic 2023

Uso conocido en ransomware

No

Descripción resumida

ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data stored in phpinfo() via GetPhpInfo.php, including administrative credentials.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-49103