CVE-2023-49103

Produto

ownCloud / ownCloud graphapi

Vulnerabilidade

ownCloud graphapi Information Disclosure Vulnerability

Adicionado ao KEV

30 de nov. de 2023

Corrigir até

21 de dez. de 2023

Uso conhecido em ransomware

Não

Descrição resumida

ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data stored in phpinfo() via GetPhpInfo.php, including administrative credentials.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-49103